Vulnerabilities > Nancyfx

DATE CVE VULNERABILITY TITLE RISK
2017-07-20 CVE-2017-9785 Deserialization of Untrusted Data vulnerability in Nancyfx Nancy
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.
network
low complexity
nancyfx CWE-502
critical
9.8