Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

ASP.NET Security Feature Bypass Vulnerability

Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability

Уязвимость программной платформы ASP.NET Core, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю обойти существующие ограничения безопасности

Important: .NET 9.0 security update

Important: .NET 8.0 security update

Important: .NET 9.0 security update

Important: .NET 8.0 security update

ELSA-2025-18153: .NET 9.0 security update (IMPORTANT)

ELSA-2025-18152: .NET 8.0 security update (IMPORTANT)

ELSA-2025-18151: .NET 9.0 security update (IMPORTANT)

ELSA-2025-18150: .NET 9.0 security update (IMPORTANT)

ELSA-2025-18149: .NET 8.0 security update (IMPORTANT)

ELSA-2025-18148: .NET 8.0 security update (IMPORTANT)