pentester.land· Mar 6, 2024· by Justin Hung, Yazhi Wang, Piotr Bazydło (@chudyPB)🔍 CVE-2023-36049

CVE-2023-36049: Microsoft .NET CRLF Injection Arbitrary File Write/deletion Vulnerability

Open Original Article ↗
Target Program: Microsoft (.NET Framework, Visual Studio)
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#CRLF injection#FTP#CVE-2023-36049