CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2021-12-03
AjaxPro.2 Deserialization Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2021-23758)
[Affected Scope] All versions of the ajaxpro.2 (Ajax.NET Professional) package
[Impact] Unauthenticated remote attackers can exploit the deserialization of untrusted data to instantiate arbitrary .NET classes, leading to Remote Code Execution (RCE)
[Mitigation] Apply the official security patch from the upstream repository, restrict unused AjaxPro handlers, or deploy WAF rules