CVE-2017-9785

Critical

Published: 20/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In NancyFX before version 1.4.4 and 2.x before version 2.0-dangermouse, there is a remote code execution vulnerability via deserialization of JSON data in a CSRF cookie.

Risk Assessment

An attacker can exploit this vulnerability to execute remote code on the server, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade NancyFX to version 1.4.4 or 2.0-dangermouse or later to mitigate this vulnerability.

Original NVD description (English source)

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.