NancyFX

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

NancyFX records in CISA KEV

No NancyFX vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Nancy · all components

TI-2017-07165 CVE-2017-9785 · GHSA-mx3q-j2g2-5qxq

MEDIUM 48

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03012 Published 2017-07-20 Fixed in 1.4.4, 2.0.0 CWE-502