CVE-2025-66631Published
CSLA .NET is vulnerable to Remote Code Execution via WcfProxy
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-66631 · Microsoft / collected KEV context
cve-program · CVE-2025-66631
- https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v
- https://github.com/MarimerLLC/csla/issues/4001
- https://github.com/MarimerLLC/csla/pull/4018
euvd · EUVD-2025-201825
- https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v
- https://github.com/MarimerLLC/csla/issues/4001
- https://github.com/MarimerLLC/csla/pull/4018
nvd · CVE-2025-66631
- https://github.com/MarimerLLC/csla/issues/4001
- https://github.com/MarimerLLC/csla/pull/4018
- https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v
osv · GHSA-wq34-7f4g-953v
- https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v
- https://nvd.nist.gov/vuln/detail/CVE-2025-66631
- https://github.com/MarimerLLC/csla/issues/4001
- https://github.com/MarimerLLC/csla/pull/4018
- https://github.com/MarimerLLC/csla
- https://learn.microsoft.com/en-us/dotnet/fundamentals/code-analysis/quality-rules/ca2310
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.