Launch Week Day 1: Announcing Security Design Review
Start for Free
UNKNOWN NuGet

Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv

GHSA-3m2r-q8x3-xmf7

Published ยท Modified

Description

Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where
a specially crafted request can cause excess resource consumption in Kestrel.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes