CVE-2017-9785

Publication date

2017-07-20 12:00:00

Family

hpe

State

PUBLISHED

Description

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.