The vulnerability of the ASP.NET Core software platform, related to deficiencies in HTTP request processing, allows attackers to circumvent existing security restrictions.

🗓️ 22 Oct 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

The ASP.NET Core vulnerability in HTTP request processing allows remote attackers to bypass security restrictions.

Reporter	Title	Published	Views	Family All 165
GithubExploit	Exploit for HTTP Request Smuggling in Microsoft	24 Oct 202514:19	–	githubexploit
GithubExploit	Exploit for CVE-2025-55315	16 Oct 202510:04	–	githubexploit
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2025-1230)	23 Oct 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2025-1231)	23 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : .NET 8.0 (ALSA-2025:18148)	21 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : .NET 8.0 (ALSA-2025:18149)	21 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : .NET 9.0 (ALSA-2025:18150)	3 Nov 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : .NET 9.0 (ALSA-2025:18151)	3 Nov 202500:00	–	nessus
Tenable Nessus	AlmaLinux 10 : .NET 8.0 (ALSA-2025:18152)	3 Nov 202500:00	–	nessus
Tenable Nessus	AlmaLinux 10 : .NET 9.0 (ALSA-2025:18153)	3 Nov 202500:00	–	nessus

Vulners

Node

OR

microsoft microsoft_visual_studio_2022Range17.14–17.14.17

microsoft microsoft_visual_studio_2022Range17.10–17.10.20

microsoft microsoft_visual_studio_2022Range17.12–17.12.13

microsoft asp.net_coreRange6.0.0–6.0.36

microsoft asp.net_coreRange8.0.0–8.0.20

microsoft asp.net_coreRange9.0.0–9.0.9

Source	Link
andrewlock	www.andrewlock.net/understanding-the-worst-dotnet-vulnerability-request-smuggling-and-cve-2025-55315/
gist	www.gist.github.com/N3mes1s/d0897c13ca199e739ecc2b562f466040
github	www.github.com/7huukdlnkjkjba/CVE-2025-55315-
github	www.github.com/dotnet/announcements/issues/371
github	www.github.com/dotnet/aspnetcore
github	www.github.com/dotnet/aspnetcore/security/advisories/GHSA-5rrx-jjjq-q2r5
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55315
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-55315
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-dotnet-sdk-8-0-cve-2025-55247-cve-2025-55248-cve-2025-55315/
web	www.web.nvd.nist.gov/view/vuln/detail

26 Nov 2025 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 28.7

CVSS 39.9

EPSS0.65838

dotnet core http request processing remote attack security restrictions bypass