ASP.NET Core 3.1 Security Vulnerabilities

CVE-2021-43877

ASP.NET Core and Visual Studio Elevation of Privilege...

CVE-2021-34532

ASP.NET Core and Visual Studio Information Disclosure...

CVE-2021-1723

ASP.NET Core and Visual Studio Denial of Service...

CVE-2020-1045

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names. The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded. The security update...

CVE-2020-1597

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...