CVE-2020-1045

CVE-2020-1045 is a security feature bypass vulnerability in Microsoft ASP.NET Core that affects fedoraproject, microsoft, and redhat products. The vulnerability stems from how ASP.NET Core parses encoded cookie names, allowing a malicious actor to set a second cookie with a percent-encoded name. With a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector, low attack complexity, and high impact on integrity, with no impact on confidentiality or availability. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, with only one mention and one article identified.