VOOZH about

URL: https://github.com/advisories/GHSA-hxrm-9w7p-39cc

⇱ Cookie parsing failure · CVE-2020-1045 · GitHub Advisory Database · GitHub

Skip to content

Cookie parsing failure

High severity GitHub Reviewed Published to the GitHub Advisory Database • Updated

Package

Microsoft.AspNetCore.App (NuGet)

Affected versions

<= 2.1.21

Patched versions

2.1.22
Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.win-arm (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.win-arm64 (NuGet)
>= 3.1.5, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet)
>= 3.1.0, < 3.1.8
3.1.8
Microsoft.AspNetCore.Http (NuGet)
< 2.1.22
2.1.22
Microsoft.Owin (NuGet)
< 4.1.1
4.1.1

Description

A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Feature Bypass Vulnerability'.

References

Published to the GitHub Advisory Database
Reviewed
Last updated

Severity

High
/ 10

CVSS v3 base metrics

Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS score

(93rd percentile)

Weaknesses

No CWEs

CVE ID

CVE-2020-1045

GHSA ID

GHSA-hxrm-9w7p-39cc

Source code

No known source code
See something to contribute? Suggest improvements for this vulnerability.
You can’t perform that action at this time.