Lucene search
+L
Dynamic-linqLinq

1 matches found

CVE
CVE
added 2023/06/22 12:00 a.m.127 views

CVE-2023-32571

CVE-2023-32571 affects System.Linq.Dynamic.Core (versions 1.0.7.10 through 1.2.25) prior to 1.3.0. The vulnerability arises when untrusted input in dynamic LINQ methods (Where, Select, OrderBy) is parsed, enabling remote code execution. Public PoCs show an attacker exploiting the injection to inv...

9.8CVSS9.8AI score0.34904EPSS
Save