Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ASP.NET Core 2.3
Vendor
Microsoft
Product
ASP.NET Core 2.3
Platforms
Unknown
Default status
Unknown
ASP.NET Core 2.3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.3
affected
custom
2.3.6
Unavailable
None listed
ASP.NET Core 8.0
Vendor
Microsoft
Product
ASP.NET Core 8.0
Platforms
Unknown
Default status
Unknown
ASP.NET Core 8.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0
affected
custom
8.0.21
Unavailable
None listed
ASP.NET Core 9.0
Vendor
Microsoft
Product
ASP.NET Core 9.0
Platforms
Unknown
Default status
Unknown
ASP.NET Core 9.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
9.0
affected
custom
9.0.10
Unavailable
None listed
Microsoft Visual Studio 2022 version 17.10
Vendor
Microsoft
Product
Microsoft Visual Studio 2022 version 17.10
Platforms
Unknown
Default status
Unknown
Microsoft Visual Studio 2022 version 17.10 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
17.10.0
affected
custom
17.10.20
Unavailable
None listed
Microsoft Visual Studio 2022 version 17.12
Vendor
Microsoft
Product
Microsoft Visual Studio 2022 version 17.12
Platforms
Unknown
Default status
Unknown
Microsoft Visual Studio 2022 version 17.12 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
17.12.0
affected
custom
17.12.13
Unavailable
None listed
Microsoft Visual Studio 2022 version 17.14
Vendor
Microsoft
Product
Microsoft Visual Studio 2022 version 17.14
Platforms
Unknown
Default status
Unknown
Microsoft Visual Studio 2022 version 17.14 · Scoped product and version facts