ASP.NET Core Authorization Flaw Allows Privilege Escalation

ASP.NET Core contains an incorrect authorization vulnerability that allows an authorized attacker to elevate privileges over a network.