Property reflection in System.Linq.Dynamic.Core

MEDIO 6.4CVE-2024-51417 · GHSA-4cv2-4hjh-77rx · Published 21/01/2025 · updated 17/06/2026

En resumen

CVE-2024-51417 es una vulnerabilidad MEDIO (CVSS 6.4) que afecta a System.Linq.Dynamic.Core.
Probabilidad de explotación en los próximos 30 días (EPSS): 0.34%, mayor que el 27.2% de las vulnerabilidades.
Solución: actualizar a 1.6.0 o posterior.

Package	Affected versions	Patched versions
System.Linq.Dynamic.Core NuGet	`< 1.6.0`	`1.6.0`

An issue in System.Linq.Dynamic.Core versions before v.1.6.0 allow remote access to properties on reflection types and static properties/fields.

NVD description

An issue in System.Linq.Dynamic.Core before 1.6.0 allows remote access to properties on reflection types and static properties/fields.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.