CVE:CVE-2021-43877
CNNVD:CNNVD-202112-1181
Microsoft ASP.NET Core和Visual Studio Code都是美国微软（Microsoft）公司的产品。Microsoft ASP.NET Core是一框跨平台开源框架。该框架用于构建Web应用、物联网应用和移动后端等基于云的应用程序。Visual Studio Code是一款开源的代码编辑器。
Microsoft ASP.NET Core和Visual Studio 存在权限许可和访问控制问题漏洞。以下产品和版本受到影响：Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6),Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8),Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10),Microsoft Visual Studio 2022 version 17.0,ASP.NET Core 3.1,ASP.NET Core 5.0,ASP.NET Core 6.0。
solution:Upgrade microsoft asp.net_core to a higher version than 3.1,5.0,6.0,and avoid the version 3.1,5.0,6.0; Upgrade microsoft visual_studio_2019 to a higher version than 16.7,16.9,16.11,and avoid the version 16.7,16.9,16.11; Upgrade microsoft visual_studio_2022 to a higher version than 17.0,and avoid the version 17.0