description: Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.
problem types: Remote Code Execution via untrusted deserialization of Json data
affected:
{
product: NancyFX Framework Up to 2.0.0
vendor: NancyFX
versions:
status: affected, version: NancyFX Framework Up to 2.0.0
}