VULNERABILITY INTELLIGENCE
CVE-2021-23758
CVSS score8.1 HIGH
EPSS probability82.58%
CISA KEVKnown exploited vulnerability
Published2021-12-03
Last modified2026-08-27
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
Vendor / product: Ajax.NET Professional / Ajax.NET Professional
Description
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.
Weakness classification
- nvd@nist.gov: CWE-502
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-502
Primary references
- report@snyk.io — Exploit, VDB Entry
- report@snyk.io — Patch, Third Party Advisory
- report@snyk.io — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource