Description
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NancyFX | NancyFX Framework Up to 2.0.0 | NancyFX Framework Up to 2.0.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Nancy | < 1.4.4 | 1.4.4 | GHSA-mx3q-j2g2-5qxq |
| NuGet | Nancy | >= 2.0.0-alpha, < 2.0.0 | 2.0.0 | GHSA-mx3q-j2g2-5qxq |