[GHSA-2865-hh9g-w894] Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability

[udlose]

Updates

• Affected products
• Description

Comments
missing info on Microsoft.AspNetCore.App.Runtime.linux-x64, for versions >= 6.0.0, <= 6.0.36

[github]

Hi there @rbhanda! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

Pull Request Overview

Updates the GHSA-2865-hh9g-w894 advisory by correcting metadata, refining the details section formatting, and adding the missing ASP.NET Core 6.0 linux-x64 package entry.

• Updated modified timestamp for the advisory.
• Reformatted the details text to highlight RefreshSignInAsync.
• Added a new JSON entry for Microsoft.AspNetCore.App.Runtime.linux-x64 versions 6.0.0–6.0.36.

Comments suppressed due to low confidence (2)

advisories/github-reviewed/2025/03/GHSA-2865-hh9g-w894/GHSA-2865-hh9g-w894.json:776

• [nitpick] Indentation for the newly inserted JSON object is less than the surrounding entries; align it with the existing 8-space indent for better readability and consistency.

    },

advisories/github-reviewed/2025/03/GHSA-2865-hh9g-w894/GHSA-2865-hh9g-w894.json:776

• Ensure the comma placement correctly separates JSON objects in the array; verify this insertion doesn’t introduce a trailing or missing comma that would invalidate the JSON.

    },

[advisory-database]

Hi @udlose! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!