wcfproxy

构建 你可以选择一次性编译该工具然后使用生成的二进制文件，或者像运行脚本一样直接运行它（Go 工具链会在运行时编译）。 对于开发，后一种方式更便捷。 对于生产使用，建议一次性编译（从 cli 目录执行）并使用生成的可执行文件。 得益于 Go 编译器，你可以从 Linux 或 Windows 构建，并针对 Linux 或 Windows 构建。 构建需要 Go 至少 1.18 版本（已用 Go 1.23 测试）。 从 Linux 构建 要从 Linux 为 Windows 或 Linux 构建，只需适当设置 GOOS（从 cli 目录执行）： GOOS=windows GOARCH=amd...

CVE-2025-66631

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...

CVE-2025-66631

CSLA .NET prior to 6.0.0 is vulnerable to remote code execution during deserialization when using WcfProxy, which relies on the obsolete NetDataContractSerializer (NDCS). Supported details from multiple sources show that versions 5.5.4 and below are affected, while version 6.0.0 and above remove ...

CVE-2025-66631 CSLA .NET is vulnerable to Remote Code Execution via WcfProxy

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...

Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)

Impact Versions of CSLA .NET prior to version 6 allow the use of WcfProxy. WcfProxy uses the NetDataContractSerializer NDCS which has known vulnerabilities that can allow remote execution of code during deserialization. NDCS itself is considered obsolete, and you should avoid using WcfProxy or...