Property reflection in System.Linq.Dynamic.Core · CVE-2024-51417 · GitHub Advisory Database · GitHub

Property reflection in System.Linq.Dynamic.Core

High severity GitHub Reviewed Published Jan 21, 2025 to the GitHub Advisory Database • Updated Jan 21, 2025

Package

System.Linq.Dynamic.Core (NuGet)

Affected versions

<= 1.5.1

Patched versions

None

Description

An issue in System.Linq.Dynamic.Core Latest version v.1.4.6 allows remote access to properties on reflection types and static properties/fields.

References

Published by the National Vulnerability Database

Jan 21, 2025

Published to the GitHub Advisory Database Jan 21, 2025

Last updated Jan 21, 2025

Reviewed Jan 21, 2025