Arbitrary Code Execution Affecting masuit.tools.core Open this link in a new tab package, versions [0,]
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.Test your applications
27 Feb 2022
13 Dec 2021
Keyang Yin, zpbrent(zhou, peng@shu)
How to fix?
There is no fixed version for
Affected versions of this package are vulnerable to Arbitrary Code Execution via the
ReceiveVarData<T> function in the
SocketClient.cs component. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the