Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.
According to the CVSS metric, the privileges required is none (PR:N). What does that mean for this vulnerability? The score is based on no user account is needed to perform the attack. According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and availability (A:L), but could lead to major loss of integrity (I:H). What does that mean for this vulnerability? An attacker who successfully exploited this vulnerability could bypass critical-header validation and the service may accept a message it should reject.
<a href="https://github.com/vcsjones">vcsjones</a> with GitHub