Skip to content
OpenAdvisories

Package · NuGet

CoreWCF.Primitives

8 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.9

    CoreWCF: WS-Security signature substitution via document-wide Signature lookup

    CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security signature verification performs a document-wide ds:Signature lookup, allowing an unauthenticated remote attacker to pla…

  • Medium 5.9

    CoreWCF: SAML token replay protection is inoperative

    CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token replay protection is inoperative because DefaultTokenReplayCache.TryAdd does not reject duplicate tokens when DetectRepl…