Edmilson Júnior

A cross-site request forgery (CSRF) flaw in Blazor and SignalR allows an unauthorized attacker to elevate privileges over a network. By sending a cross-site request to the '/ blazor/refresh' endpoint, an attacker can bind a user's identity to an attacker's circuit, enabling them to act as a signed-in user.

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network. SignalR connections are not consistently bound to the identity negotiated at connection establishment, which enables injected messages to execute Hub invocations as the victim.

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. This issue specifically affects Identity pages generated by the scaffolder or templates, such as 'ForgotPassword' and 'ResetPassword'.

Incorrect authorization in Permissions allows a remote attacker who has compromised the renderer process to obtain sensitive information by using a crafted HTML page.