ASP.NET Security Feature Bypass Vulnerability

ASP.NET Core has a flaw that lets an authorized attacker send specially crafted HTTP requests to trick the server into processing malicious data that should have been blocked, bypassing built-in security protections.

HTTP request smuggling vulnerability in ASP.NET Core due to inconsistent interpretation of HTTP requests between the application and intermediate components. An authorized attacker can exploit this to bypass security features; the attack requires network access but no elevated privileges beyond basic authorization.