Vulnerabilities in ASP.NET Core MVC 3.1