GitHub Advisoryadvisory · NuGet

GHSA-hpf7-4c2g-9chf Remote Code Execution in Halibut

CRITICAL Published 2021-09-23 Modified 2021-09-30 Official page ↗
Aliases
CVE-2021-31819
Ecosystem
NuGet
Packages
Halibut
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502
Reviewed
2021-09-23

Affected packages

• NuGet Halibut: < 4.4.7 → fixed in 4.4.7

Description

In Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote code execution on systems that already trust each other based on certificate verification.

Related

Alias · CVE (1)

  • CVE-2021-31819 In Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote code execution on systems that already… vulnerability

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References