CyberRota Analysis
AI-GeneratedCoreWCF versions prior to 1.8.1 and 1.9.1 are vulnerable due to inadequate verification of the ds:Signature in WS-Security, which can allow attackers to replay signed SOAP envelopes and execute arbitrary operations as the victim. This vulnerability poses a significant risk to applications relying on CoreWCF for secure communication. Organizations using affected versions should prioritize upgrading to the patched releases to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security endorsing and supporting signature verification does not ensure the selected ds:Signature covers the expected Security header target, allowing an attacker with one captured signed SOAP envelope to replay arbitrary service operations as the victim principal. This issue is fixed in versions 1.8.1 and 1.9.1.