Property reflection in System.Linq.Dynamic.Core

MÉDIO 6.4CVE-2024-51417 · GHSA-4cv2-4hjh-77rx · Published 21/01/2025 · updated 17/06/2026

Em resumo

CVE-2024-51417 é uma vulnerabilidade MÉDIO (CVSS 6.4) que afeta System.Linq.Dynamic.Core.
Chance de exploração nos próximos 30 dias (EPSS): 0.34%, maior que 27.2% das vulnerabilidades.
Correção: atualize para 1.6.0 ou posterior.

Package	Affected versions	Patched versions
System.Linq.Dynamic.Core NuGet	`< 1.6.0`	`1.6.0`

An issue in System.Linq.Dynamic.Core versions before v.1.6.0 allow remote access to properties on reflection types and static properties/fields.

NVD description

An issue in System.Linq.Dynamic.Core before 1.6.0 allows remote access to properties on reflection types and static properties/fields.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.