Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
What type of information could be disclosed by this vulnerability? Exploiting this vulnerability could allow the disclosure of credentials. According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability? An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.
<a href="https://caveeroo.dev/">caveeroo</a> with <a href="https://www.tarlogic.com/">Tarlogic</a>, <a href="https://www.linkedin.com/in/jiheun-kim/">l8BL</a> with <a href="https://www.enki.co.kr/">ENKI WhiteHat</a>, Attila.Cs(zerodaybugs.com) with https://zerodaybugs.com/, Anonymous, Harkenzo, Raffaello Tamagnini, <a href="https://www.linkedin.com/in/leandrosbatista21/">Leandro Batista</a>, <a href="https://www.linkedin.com/in/kevin-sch/">Kevin Schmidt</a>, Piotr Pietruszewski, Anonymous, <a href="https://x.com/crusader_sec">Brent Woodard</a> with <a href="https://crusaderproxy.com/">Crusader Security, LLC</a>, <a href="https://linkedin.com/in/weeraphat-srisutham">Weeraphat Srisutham</a>, Lucas Futures, <a href="https://www.linkedin.com/in/wenhan-zhou-4a949b21a/">Wenhan Zhou</a>, jhanks, Anonymous, <a href="https://x.com/ky0tofu">Ky0toFu</a>