VDB
BDU%3A2025-13247
BDU%3A2025-13247
PUBLISHED
CVSS 8.699999809265137 HIGH
Уязвимость программной платформы ASP.NET Core, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю обойти существующие ограничения безопасности
Risk Scores
CVSS 2.0
8.699999809265137
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ООО «Ред Софт», Microsoft Corp | РЕД ОС (запись в едином реестре российских программ №3751), Microsoft Visual Studio 2022, ASP.NET Core |
Timeline
- Oct 22, 2025 CVE Published
- Nov 26, 2025 CVE Updated
- Mar 22, 2026 Security Advisory
References
- https://andrewlock.net/understanding-the-worst-dotnet-vulnerability-request-smuggling-and-cve-2025-55315/ url
- https://github.com/dotnet/aspnetcore url
- https://github.com/dotnet/aspnetcore/security/advisories/GHSA-5rrx-jjjq-q2r5 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-55315 url
- https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-dotnet-sdk-8-0-cve-2025-55247-cve-2025-55248-cve-2025-55315/?sphrase_id=1338954 advisory
- https://gist.github.com/N3mes1s/d0897c13ca199e739ecc2b562f466040 url
- https://github.com/7huukdlnkjkjba/CVE-2025-55315- url
- https://github.com/dotnet/announcements/issues/371 url
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55315 advisory