{"id":"EUVD-2025-201825","enisaUuid":"6e110aae-24aa-3f68-b2fb-16d742afdfc1","description":"CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer (NDCS) and is vulnerable to remote code execution during deserialization. This vulnerability is fixed in version 6.0.0. To workaround this issue, remove the WcfProxy in data portal configurations.","datePublished":"Dec 9, 2025, 3:18:37 AM","dateUpdated":"Dec 9, 2025, 3:15:06 PM","baseScore":7.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","references":"https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v\nhttps://github.com/MarimerLLC/csla/issues/4001\nhttps://github.com/MarimerLLC/csla/pull/4018\n","aliases":"CVE-2025-66631\nGHSA-wq34-7f4g-953v\n","assigner":"GitHub_M","epss":0.67,"enisaIdProduct":[{"id":"e0ab6175-e770-30c7-a39f-8137d0e03579","product":{"name":"csla","vendor":{"name":"MarimerLLC"}},"product_version":"\u003c 6.0.0"}],"enisaIdVendor":[{"id":"681fb5f5-9ff6-3021-85ab-f8d9be493374","vendor":{"name":"MarimerLLC"}}],"enisaIdVulnerability":[{"id":"a8d8a451-9a6c-36ea-8732-0a9e746bf9f9","vulnerability":{"id":"GHSA-wq34-7f4g-953v","description":"Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)","datePublished":"Dec 8, 2025, 10:15:56 PM","dateUpdated":"Dec 9, 2025, 7:17:25 PM","baseScore":0.0,"references":"https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-66631\nhttps://github.com/MarimerLLC/csla/issues/4001\nhttps://github.com/MarimerLLC/csla/pull/4018\nhttps://github.com/MarimerLLC/csla\nhttps://learn.microsoft.com/en-us/dotnet/fundamentals/code-analysis/quality-rules/ca2310\n","enisa_id":"EUVD-2025-201825\n","aliases":"CVE-2025-66631\nGHSA-wq34-7f4g-953v\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"e556c838-14da-3d3f-8727-24349fd8fa4a","vulnerability":{"id":"CVE-2025-66631","description":"CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer (NDCS) and is vulnerable to remote code execution during deserialization. This vulnerability is fixed in version 6.0.0. To workaround this issue, remove the WcfProxy in data portal configurations.","datePublished":"Dec 9, 2025, 3:18:37 AM","dateUpdated":"Dec 9, 2025, 3:15:06 PM","status":"PUBLISHED","baseScore":7.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","references":"https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v\nhttps://github.com/MarimerLLC/csla/issues/4001\nhttps://github.com/MarimerLLC/csla/pull/4018\n","enisa_id":"EUVD-2025-201825\n","assigner":"GitHub_M","epss":0.67,"dataProcessed":"Oct 28, 2026, 7:20:21 AM","vulnerabilityProduct":[{"id":"1361bbda-f8d6-3f4b-9058-30767af2b405","product":{"name":"csla","vendor":{"name":"MarimerLLC"}},"product_version":"\u003c 6.0.0"}],"vulnerabilityVendor":[{"id":"37f1f1ac-0eb7-3b5e-8146-e322c012aa9a","vendor":{"name":"MarimerLLC"}}]}}],"enisaIdAdvisory":[]}