CVEs-PoC/2017/CVE-2017-9785.md

CVE-2017-9785

Description

Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/BitcoinChatGPT/DeserializeSignature-Vulnerability-Algorithm
• https://github.com/BitcoinChatGPT/Joux-Lercier-Vulnerability-Algorithm
• https://github.com/dotnet-felickz/vulnerable-dependencies