Critical severity9.8NVD Advisory· Published Jun 22, 2023· Updated Jun 17, 2026

CVE-2023-32571

Description

Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
System.Linq.Dynamic.CoreNuGet	>= 1.0.7.10, < 1.3.0	1.3.0

Affected products

Dynamic Linq/Linq
cpe:2.3:a:dynamic-linq:linq:*:*:*:*:*:*:*:*
Range: >=1.0.7.10,<=1.2.25
Dynamic Linq/Dynamic Linqdescription
ghsa-coords
pkg:nuget/system.linq.dynamic.core
Range: >= 1.0.7.10, < 1.3.0

Patches

Vulnerability mechanics

References

research.nccgroup.com/2023/06/13/dynamic-linq-injection-remote-code-execution-vulnerability-cve-2023-32571/nvdExploit
github.com/advisories/GHSA-w65q-jcmv-28gjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-32571ghsaADVISORY
research.nccgroup.com/2023/06/13/dynamic-linq-injection-remote-code-execution-vulnerability-cve-2023-32571ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.028
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000