Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
.NET and Visual Studio Denial of Service Vulnerability
Advisories for Nuget/Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv package
2023
2018
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv
Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel.