Lucene search

K
osvGoogleOSV:GHSA-VH38-GHX6-VMVG
HistoryMay 03, 2022 - 12:00 a.m.

Code Injection in Masuit.Tools.Core

2022-05-0300:00:46
Google
osv.dev
12
code injection
masuit.tools.core
arbitrary code execution
socketclient
binaryformatter
software

EPSS

0.004

Percentile

73.2%

All versions of package Masuit.Tools.Core are vulnerable to Arbitrary Code Execution via the ReceiveVarData<T> function in the SocketClient.cs component. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatter.

EPSS

0.004

Percentile

73.2%

Related for OSV:GHSA-VH38-GHX6-VMVG