What is CVE-2021-31957?

CVE-2021-31957 is a medium-severity software vulnerability with a CVSS score of 5.9. ASP.NET Core Denial of Service Vulnerability

Is CVE-2021-31957 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 5%.

Tracked products affected include .NET. Check the version you run to see whether it is affected.

Apply the vendor fix in your normal patch cycle. An official patch or advisory is available. Upgrade affected products to a fixed version.

MEDIUM severity · CVSS 5.9

5.9CVSS MEDIUM

ASP.NET Core Denial of Service Vulnerability

Attack vectorNetwork

Attack complexityHigh

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactNone

Availability impactHigh

Exploit probability (EPSS)5%

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.