Launch Week Day 1: Announcing Security Design Review
UNKNOWN NuGet

Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core

GHSA-cgpw-2gph-2r9g

Published ยท Modified

Description

Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack.

The update addresses the vulnerability by correcting how ASP.NET Core handles such requests.

Ready to move

Start Securing

Free, no credit card | First findings in minutes