StackRadar

CVE-2023-33170

High

Advisory

Published 11 Jul 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
22
of 17,781 indexed, latest versions
Container images
45
deployed by those charts
Fix available
3 of 3
affected packages

Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability

Carried by container images the latest versions of 22 of 17,781 indexed charts deploy, on 45 images.

Affected packageAffected versionsFixed inImages
Microsoft.AspNetCore.App.Runtime.linux-x64nuget3.1.3, 3.1.4, 3.1.5, 3.1.9+11 more6.0.2042
Microsoft.AspNetCore.App.Runtime.linux-musl-x64nuget7.0.57.0.92
Microsoft.AspNetCore.Identitynuget2.0.0.172052.1.391
OSV records
GHSA-25c8-p796-jg6r
Also known as
BIT-dotnet-2023-33170, BIT-dotnet-sdk-2023-33170

Charts affected

22 by stars
ChartLatestAffected imagesRadar Score
eshoponabpabp-charts1.0.010 of 15See more

eshoponabp abp-charts 1.0.0

10 of the 15 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20

Open the chart page →

19,799
fedodo.chartfedodo0.5.112 of 4See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
fedodo/fedodo.be.activitypub:14728dada8e3216
Microsoft.AspNetCore.App.Runtime.linux-musl-x64@7.0.5
7.0.9
fedodo/fedodo.be.auth:208f8eb7a1207e
Microsoft.AspNetCore.App.Runtime.linux-musl-x64@7.0.5
7.0.9

Open the chart page →

4,399
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-assure-identity:2.0.0147854a3c916
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-audit:2.0.079428add7f38
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-binary-storage:2.0.053decadc102d
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-deployment:2.0.0ea8110886d38
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-management-api:2.0.0b9a23345eabd
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
lumenvox/cloud-voice-verifier:2.0.014170ad34903
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20

Open the chart page →

70,741
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
zbalogh/reservation-dotnet-auth-server:1.0.909a51b809674
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.17
6.0.20

Open the chart page →

6,639
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
testhubio/testhub-api:on-prem56badee134b9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
6.0.20

Open the chart page →

7,517
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.14 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

4 of the 7 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.20
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.20
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.20
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.20

Open the chart page →

10,091
kafkamagicdysnixVerified publisher0.2.31 of 1See more

kafkamagic dysnix 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
6.0.20

Open the chart page →

1,906
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.11
6.0.20

Open the chart page →

4,920
faasnetfaasnet0.0.42 of 5See more

faasnet faasnet 0.0.4

2 of the 5 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
simpleidserver/faasgateway:0.0.453c159ea49ca
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.13
6.0.20
simpleidserver/faaskubernetes:0.0.49007e742dd48
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.13
6.0.20

Open the chart page →

7,617
archisteamfarmg0dscookie0.3.01 of 2See more

archisteamfarm g0dscookie 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.4
6.0.20

Open the chart page →

966
helm-chart-samplehelm-chart-sampleVerified publisher0.1.01 of 2See more

helm-chart-sample helm-chart-sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
karatejb/demo-k8s:latestf11ac24b23b9
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.7
6.0.20

Open the chart page →

964
external-scaler-azure-cosmos-dbkedacore0.1.01 of 1See more

external-scaler-azure-cosmos-db kedacore 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
ghcr.io/kedacore/external-scaler-azure-cosmos-db:0.1.04985d164ead9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.21
6.0.20

Open the chart page →

1,186
nbxplorerkronkltdVerified publisher0.1.51 of 2See more

nbxplorer kronkltd 0.1.5

1 of the 2 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.4
6.0.20

Open the chart page →

1,669
myfirstdockerkubermyrepo0.1.01 of 1See more

myfirstdockerkuber myrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
kodalisri/cherrys:testapp202268d66e1a
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.11
6.0.20

Open the chart page →

1,455
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.9
6.0.20

Open the chart page →

55,726
cyclonedxopenshift-bootstrapsVerified publisher1.0.121 of 1See more

cyclonedx openshift-bootstraps 1.0.12

1 of the 1 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20

Open the chart page →

726
bagetsimcube1.0.51 of 1See more

baget simcube 1.0.5

1 of the 1 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.10
6.0.20

Open the chart page →

1,687
dotstatsuitestatcan0.2.82 of 6See more

dotstatsuite statcan 0.2.8

2 of the 6 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.5
6.0.20
siscc/dotstatsuite-core-sdmxri-nsi:master00d73f06edcf
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.9
6.0.20

Open the chart page →

3,841
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Identity@2.0.0.17205
2.1.39

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Identity@2.0.0.17205
2.1.39

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Identity@2.0.0.17205
2.1.39

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-33170.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Identity@2.0.0.17205
2.1.39

Open the chart page →

3,329

Container images carrying it

45 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Identity@2.0.0.17205
2.1.39
4
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.20
1
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.20
1
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.20
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
6.0.20
1
craigwillis/c2metadata-bd:latestae317d7e4724
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.9
6.0.20
1
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
6.0.20
1
fedodo/fedodo.be.activitypub:14728dada8e3216
Microsoft.AspNetCore.App.Runtime.linux-musl-x64@7.0.5
7.0.9
1
fedodo/fedodo.be.auth:208f8eb7a1207e
Microsoft.AspNetCore.App.Runtime.linux-musl-x64@7.0.5
7.0.9
1
karatejb/demo-k8s:latestf11ac24b23b9
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.7
6.0.20
1
kodalisri/cherrys:testapp202268d66e1a
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.11
6.0.20
1
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.10
6.0.20
1
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-audit:2.0.079428add7f38
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-deployment:2.0.0ea8110886d38
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.14
6.0.20
1
nethermind/nethermind:1.14.615517708c3b6
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.11
6.0.20
1
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.4
6.0.20
1
simpleidserver/faasgateway:0.0.453c159ea49ca
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.13
6.0.20
1
simpleidserver/faaskubernetes:0.0.49007e742dd48
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.13
6.0.20
1
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.5
6.0.20
1
siscc/dotstatsuite-core-sdmxri-nsi:master00d73f06edcf
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.9
6.0.20
1
testhubio/testhub-api:on-prem56badee134b9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.3
6.0.20
1
zbalogh/reservation-dotnet-auth-server:1.0.909a51b809674
Microsoft.AspNetCore.App.Runtime.linux-x64@5.0.17
6.0.20
1
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.4
6.0.20
1
ghcr.io/kedacore/external-scaler-azure-cosmos-db:0.1.04985d164ead9
Microsoft.AspNetCore.App.Runtime.linux-x64@3.1.21
6.0.20
1
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
6.0.20
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.