Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-28698 EUVD-2024-2313GHSA-9xhh-3m78-gvgj

CLSA Directory Traversal vulnerability

Published Jul 22, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

Directory Traversal vulnerability in Marimer LLC CSLA .Net before 8.0 allows a remote attacker to execute arbitrary code via a crafted script to the MobileFormatter component.

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Csla < 5.5.4 5.5.4 GHSA-9xhh-3m78-gvgj
NuGet Csla >= 6.0.0, < 8.0.0 8.0.0 GHSA-9xhh-3m78-gvgj
NuGet Csla >= 7.0.0, < 8.0.0 8.0.0 GHSA-9xhh-3m78-gvgj

References