Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network. A crafted `X-Forwarded-Prefix` can inject cookie path delimiters if PathBase-derived cookie paths do not percent-encode semicolons.