PT-2025-49778 · Csla .Net · Csla .Net

Published 2025-12-09 · Updated 2025-12-09 · CVE-2025-66631

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CSLA .NET versions prior to 6.0.0

Description CSLA .NET is a framework for building business layers in applications. Versions 5.5.4 and below permit the use of WcfProxy, which utilizes the outdated NetDataContractSerializer (NDCS). This configuration creates a risk of remote code execution during deserialization. The issue is addressed in version 6.0.0.

Recommendations Remove the WcfProxy in data portal configurations.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-66631

GHSA-WQ34-7F4G-953V

Affected Products

Csla .Net

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66631.json · Exploit
• https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v · Vendor Advisory
• https://github.com/MarimerLLC/csla/pull/4018 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-66631 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66631 · Vendor Advisory
• https://github.com/MarimerLLC/csla/issues/4001 · Note
• https://t.me/CVEtracker/39205 · Telegram Post
• https://twitter.com/CVEnew/status/1998355388656455977 · Twitter Post