Michaelschwarz vulnerabilities
Published CVEs affecting Michaelschwarz products: 1 record(s), with severity, exploitation and fixes.
CVE-2021-23758
Critical · 9.8
KEV Urgent · 78 Public exploit CWE-502 Dec 3, 2021
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.