Kevin Gosse

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network. SignalR connections are not consistently bound to the identity negotiated at connection establishment, which enables injected messages to execute Hub invocations as the victim.

Use of an uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network. Specifically, a reused `ResponseBufferingStream` can retain pooled tail memory, which may expose response-body data from a different request through HTTP logging.

Uncontrolled resource consumption allows an unauthorized attacker to cause a denial of service over a network.