MarimerLLC/csla

MarimerLLC/csla

Releases99

Frequency1 month 2 weeks

Last Release 2 months ago

Stars1.35K

A home for your business logic in any .NET application.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-66631 ↗	Dec 9, 2025Tuesday, 9 December 2025, 16:18	9.8 CRITICAL	—
CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer (NDCS) and is vulnerable to remote code execution during deserialization. This vulnerability is fixed in version 6.0.0. To workaround this issue, remove the WcfProxy in data portal configurations.
CVE-2024-28698 ↗	Jul 22, 2024Monday, 22 July 2024, 18:15	9.8 CRITICAL	—
Directory Traversal vulnerability in Marimer LLC CSLA .Net before 8.0 allows a remote attacker to execute arbitrary code via a crafted script to the MobileFormatter component.