CVE-2023-32571

9.8

CRITICALCVSS v3

Published

June 22, 2023

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.

ENikS/LINQ

GitHubTypeScript Implementation of Language-Integrated Query (LINQ) (ECMAScript 2015)

>= 1.0.7.10, <= 1.2.25NVD

@microsoft.azure/linq

NPMLINQ-like functionality for Typescript

>= 1.0.7.10, <= 1.2.25NVD

@azure-tools/linq

NPM

More on this CVE

NVD↗GitHub Advisory↗

LINQ-like functionality for Typescript.

>= 1.0.7.10, <= 1.2.25NVD

linq

NPMlinq.js - LINQ for JavaScript

>= 1.0.7.10, <= 1.2.25NVD

mihaifm/linq

GitHublinq.js - LINQ for JavaScript

>= 1.0.7.10, <= 1.2.25NVD

zzzprojects/System.Linq.Dynamic.Core

GitHubThe .NET Standard / .NET Core version from the System Linq Dynamic functionality.

NVD

Security Advisories

CVE-2023-32571

Description

More on this CVE