by Kastro
Paper/Archive/CVE-2025-55315

CVE-2025-55315

Microsoft ASP.NET Core 2.3 — ASP.NET Security Feature Bypass Vulnerability

EPSS 67%public exploitCVSS 9.9
critical.is priorityof 100
60
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 99.3.993 × 2019.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

Affected

ProductAffectedFixed inSource
ASP.NET Core 2.32.3 – < 2.3.62.3.6CNA
ASP.NET Core 8.08.0 – < 8.0.218.0.21CNA
ASP.NET Core 9.09.0 – < 9.0.109.0.10CNA
Microsoft Visual Studio 2022 version 17.1017.10.0 – < 17.10.2017.10.20CNA
Microsoft Visual Studio 2022 version 17.1217.12.0 – < 17.12.1317.12.13CNA
Microsoft Visual Studio 2022 version 17.1417.14.0 – < 17.14.1717.14.17CNA

Scores by source

microsoft (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

patchmsrc.microsoft.com/update-guide/vulnerability/CVE-2025-55315exploitgist.github.com/N3mes1s/d0897c13ca199e739ecc2b562f466040refandrewlock.net/understanding-the-worst-dotnet-vulnerability-request-smuggling-and-cve-2025-55315