Lucene search

K
osvGoogleOSV:GHSA-MX3Q-J2G2-5QXQ
HistoryMay 17, 2022 - 2:26 a.m.

Deserialization of Untrusted Data in NancyFX Nancy

2022-05-1702:26:07
Google
osv.dev
11
nancyfx
deserialization
remote code execution
csrf cookie

EPSS

0.007

Percentile

80.2%

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.

EPSS

0.007

Percentile

80.2%

Related for OSV:GHSA-MX3Q-J2G2-5QXQ