PT-2025-42010 · Microsoft · Asp.Net Core

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-55315

Positive Technologies · (AI Summary)

CVSS v3.1

9.9

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions ASP.NET Core (affected versions not specified)

Description An issue exists in ASP.NET Core related to inconsistent interpretation of HTTP requests and responses, leading to HTTP request/response smuggling. This allows an authorized attacker to bypass a security feature over a network by manipulating how the server processes HTTP traffic. The vulnerability involves how the server handles 'http request/response smuggling'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2025-55315

Affected Products

Asp.Net Core

References · 5

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55315 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55315 · Security Note
• https://twitter.com/CVEnew/status/1978198292258234640 · Twitter Post
• https://twitter.com/CveTodo/status/1978155906110996772 · Twitter Post
• https://twitter.com/dailycve/status/1978209902590824463 · Twitter Post