Most recent entries from all

bdu:2020-04581

certfr-2020-avi-563 — Une vulnérabilité a été corrigée dans Microsoft .Net. Elle permet à un attaquant de provoqu…

certfr-2020-avi-563

cnvd-2020-72702

EUVD-2026-202356

fkie_cve-2020-1045

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names. The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded. The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.

GHSA-hxrm-9w7p-39cc — Cookie parsing failure

Affected: NuGet: Microsoft.AspNetCore.Http, NuGet: Microsoft.AspNetCore.App, NuGet: Microsoft.Owin, NuGet: Microsoft.AspNetCore.App.Runtime.linux-arm, NuGet: Microsoft.AspNetCore.App.Runtime.linux-arm64, NuGet: Microsoft.AspNetCore.App.Runtime.linux-musl-x64, NuGet: Microsoft.AspNetCore.App.Runtime.linux-x64, NuGet: Microsoft.AspNetCore.App.Runtime.osx-x64, NuGet: Microsoft.AspNetCore.App.Runtime.win-arm, NuGet: Microsoft.AspNetCore.App.Runtime.win-x64 and 3 more

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Feature Bypass Vulnerability'.

gsd-2020-1045

RHSA-2020:3697 — Red Hat Security Advisory: .NET Core 3.1 security and bugfix update for Red Hat Enterprise Linux

dotnet: ASP.NET cookie prefix spoofing vulnerability

RHSA-2020:3699 — Red Hat Security Advisory: .NET Core 3.1 security and bugfix update

dotnet: ASP.NET cookie prefix spoofing vulnerability