← Back

CVE-2023-32571

nvd nist
Published: Jun 22, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.

Affected (1)

Products: Dynamic Linq: Linq
Dynamic Linq
1 product
Linq
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linq
From 1.0.7.10 to 1.2.25

Related CWEs

CWE-697
Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

References (4)

Source: cve@mitre.org
Product
Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.