Description
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft ASP.NET Core 2.3
2.3 to < 2.3.6affected
Microsoft ASP.NET Core 8.0
8.0 to < 8.0.21affected
Microsoft ASP.NET Core 9.0
9.0 to < 9.0.10affected
Microsoft Microsoft Visual Studio 2022 version 17.10
17.10.0 to < 17.10.20affected
Microsoft Microsoft Visual Studio 2022 version 17.12
17.12.0 to < 17.12.13affected
Microsoft Microsoft Visual Studio 2022 version 17.14
17.14.0 to < 17.14.17affected