Lucene search
Veracode Vulnerability DatabaseVERACODE:30974HistoryJun 16, 2021 - 8:47 a.m.
Remote Code Execution (RCE)
2021-06-1608:47:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
remote code execution
csrf cookie
objectserializer
json validation
EPSS
0.007
Percentile
80.2%
nancy is vulnerable to remote code execution (RCE). ObjectSerializer does not properly validate JSON data when handling CSRF cookies, allowing an attacker to inject a malicious JSON object through a CSRF Cookie.
Related
nvd
nvd
CVE-2017-9785
2017-07-20 12:29:00
prion
prion
Deserialization of untrusted data
2017-07-20 12:29:00
osv
osv
Deserialization of Untrusted Data in NancyFX Nancy
2022-05-17 02:26:07
CVE-2017-9785
2017-07-20 12:29:00
cvelist
cvelist
CVE-2017-9785
2017-07-20 12:00:00
cve
cve
CVE-2017-9785
2017-07-20 12:29:00
github
github
Deserialization of Untrusted Data in NancyFX Nancy
2022-05-17 02:26:07
