{"id":"EUVD-2025-34426","revision":"96eafbb6ad6547b2aba52d0036c4a863","records":[{"revision":"96eafbb6ad6547b2aba52d0036c4a863","observedAt":"2026-11-07T02:40:43.098+00:00","statement":{"source":"euvd","id":"EUVD-2025-34426","aliases":["CVE-2025-55315","GHSA-5rrx-jjjq-q2r5"],"title":"Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.","description":"Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C","score":9.9,"severity":null}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55315"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-34426","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 14, 2025, 5:00:10 PM","dateUpdated":"Feb 22, 2026, 5:24:12 PM"},"relatedAdvisories":[{"id":"RHSA-2025:18150","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2026:9080","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-26646","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"NCSC-2025-0313","title":"Kwetsbaarheden verholpen in Microsoft Developer Tools","vulnerabilityIds":["CVE-2025-25004","CVE-2025-54132","CVE-2025-55240","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2025:18256","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2026:9205","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-26646","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2025:18153","title":"Red Hat Security Advisory: .NET 9.0 security update","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2025:18148","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHBA-2025:20916","title":"Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55315"]},{"id":"RHSA-2025:18149","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHBA-2025:20993","title":"bugfix update for dotnet10.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55315"]},{"id":"msrc_CVE-2025-55315","title":"ASP.NET Security Feature Bypass Vulnerability","vulnerabilityIds":["CVE-2025-55315"]},{"id":"RHSA-2025:18151","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2025:18152","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2025-55247","CVE-2025-55248","CVE-2025-55315"]},{"id":"RHSA-2025:23225","title":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.25.0 Release.","vulnerabilityIds":["CVE-2024-4067","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2025-55752","CVE-2025-61927","CVE-2025-66516"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-34426","identifiers":["EUVD-2025-34426","CVE-2025-55315","GHSA-5rrx-jjjq-q2r5"]},"retained":false,"historicalAffected":[]}],"coverage":[]}