Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
What kind of security feature could be bypassed by successfully exploiting this vulnerability? The authentication feature could be bypassed as this vulnerability allows impersonation. How could an attacker exploit this vulnerability? An unauthenticated attacker could exploit this vulnerability by sending specially crafted HTTP/2 requests to an affected server. Successful exploitation could allow the attacker to bypass access controls and reach protected resources. No authentication or user interaction is required.
<a href="https://www.linkedin.com/in/hyperxpro/">Aayush Atharva</a>