GitHub Advisoryadvisory · NuGet
GHSA-4cv2-4hjh-77rx Property reflection in System.Linq.Dynamic.Core
HIGH
Official page ↗
- Aliases
- CVE-2024-51417
- Ecosystem
- NuGet
- Packages
- System.Linq.Dynamic.Core
- Severity
- High
- Reviewed
- 2025-01-21
Affected packages
• NuGet System.Linq.Dynamic.Core: < 1.6.0 → fixed in 1.6.0
Description
An issue in System.Linq.Dynamic.Core versions before v.1.6.0 allow remote access to properties on reflection types and static properties/fields.
Related
Alias · CVE (1)
- CVE-2024-51417 An issue in System.Linq.Dynamic.Core before 1.6.0 allows remote access to properties on reflection types and static properties/fields. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-51417 advisory
- https://github.com/zzzprojects/System.Linq.Dynamic.Core/issues/867 web
- https://github.com/zzzprojects/System.Linq.Dynamic.Core/commit/49b6cf0909cf3571e0d3580317675408300dbdac web
- https://dynamic-linq.net/expression-language#operators web
- https://github.com/zzzprojects/System.Linq.Dynamic.Core package
- https://zzzprojects.com web