{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amicrosoftasp.net_core/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2025-55315"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ASP.NET Core","Visual Studio 2022"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Microsoft"],"content_html":"\u003cp\u003eCVE-2025-55315 is an HTTP request smuggling vulnerability involving malformed chunked encoding (LF-only line endings) and 'chUnKEd' header bypass. Public proof-of-concept exploitation code has been published. The vulnerability has a CVSS score of 9.9.\u003c/p\u003e\n","date_modified":"2026-10-29T00:46:22Z","date_published":"2026-10-29T00:46:22Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2025-55315-aspnet/","summary":"A public proof-of-concept (PoC) exploit has been published for CVE-2025-55315, an HTTP request smuggling vulnerability in Microsoft ASP.NET Core.","title":"Microsoft ASP.NET Core: HTTP Request Smuggling (CVE-2025-55315)","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2025-55315-aspnet/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}