Nguyen Tai Phuc An

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network. SignalR connections are not consistently bound to the identity negotiated at connection establishment, which enables injected messages to execute Hub invocations as the victim.

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to cause a denial of service over a network. The issue occurs because multipart form processing can bypass the configured header-count limit, leading to the consumption of excessive resources.

Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. Specifically, the `PathString.StartsWithSegments()` function can mishandle percent-encoded backslashes, which may permit authorization checks to match an unintended path.

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to cause a denial of service over a network. Specifically, Minimal API validation repeatedly copies a growing validation-error dictionary, which enables attacker-controlled collections to trigger quadratic CPU work after the client disconnects.

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.