CVE-2024-51417

Description

An issue in System.Linq.Dynamic.Core before 1.6.0 allows remote access to properties on reflection types and static properties/fields.

Affected Platforms

Weakness Type

CWE-863

References

• https://dynamic-linq.net/expression-language#operators
• https://github.com/zzzprojects/System.Linq.Dynamic.Core/issues/867
• https://zzzprojects.com/