Vulnerabilities > Mono > Monox > High

DATE CVE VULNERABILITY TITLE RISK
2020-04-29 CVE-2020-12471 Deserialization of Untrusted Data vulnerability in Mono Monox 5.1.40.5152
MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.
network
low complexity
mono CWE-502
7.5