writeups.xyz / Security Feature Bypass In ASP.NET and Visual Studio – Race Condition

Submitter : c2a

Date: 12 July 2023

Bounty : undisclosed

Vulnerabilities :

• Race Condition
• Bruteforce

Programs :

• Microsoft

Authors :

• Jack Moran
• TC
• Ethan McKee-Harris

Link :
https://zxsecurity.co.nz/research/advisories/race-condition-asp-net-core-signinmanager/