CVE-2021-23758
Assigner: snyk
Published: 2021-12-03T00:00:00
State: PUBLISHED
title: Deserialization of Untrusted Data
datePublic: 2021-12-03T00:00:00
descriptions: value: All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.
affected: vendor: n/a
product: AjaxPro.2
versions: version: 0
status: affected
lessThan: unspecified
versionType: custom
credits: value: Hans-Martin Münch (MOGWAI LABS)
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
problemTypes: descriptions: type: text
description: Deserialization of Untrusted Data