CVE Intelligence

MarimerLLC Csla vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting MarimerLLC Csla: 1 record(s), with affected versions and fixes.

CVE-2025-66631 Critical · 9.8 CWE-502 Dec 9, 2025
CSLA .NET is vulnerable to Remote Code Execution via WcfProxy
CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer (NDCS) and is vulnerable to remote code execution during deserialization. This vulnerability is fixed in version 6.0.0. To workaround this issue, remove the WcfProxy in data portal configurations.