GoogleOSV:GHSA-HXRM-9W7P-39CCCookie parsing failure
EPSS
Percentile
73.0%
A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka ‘Microsoft ASP.NET Core Security Feature Bypass Vulnerability’.
References
access.redhat.com/errata/RHSA-2020:3699
github.com/dotnet/announcements/issues/165
github.com/dotnet/aspnetcore/issues/25701
github.com/dotnet/aspnetcore/issues/25701#issuecomment-689434477
github.com/dotnet/aspnetcore/pull/24264
github.com/dotnet/core/blob/main/release-notes/3.1/3.1.8/3.1.8.md#changes-in-318
github.com/github/advisory-database/issues/302
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LN2FUVBSVPGK7AU3NMLO3YR6CGONQPB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASICXQXS4M7MTAF6SGQMCLCA63DLCUT3
lists.fedoraproject.org/archives/list/[email protected]/message/5LN2FUVBSVPGK7AU3NMLO3YR6CGONQPB
lists.fedoraproject.org/archives/list/[email protected]/message/ASICXQXS4M7MTAF6SGQMCLCA63DLCUT3
nvd.nist.gov/vuln/detail/CVE-2020-1045
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1045
security.snyk.io/vuln/SNYK-RHEL8-DOTNET-1439600
Related
