Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

Published: 2025-10-14

CVSS: 9.9

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Download CVE-2025-55315 POC (Proof-of-Concept) here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

https://connollyfinan.ie/poc-33-cve-2022-23131/

https://connollyfinan.ie/poc-463-cve-2025-0411/

https://connollyfinan.ie/poc-561-cve-2022-42475/

https://connollyfinan.ie/poc-198-cve-2023-26360/

https://connollyfinan.ie/poc-219-cve-2025-33073/