Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

AjaxNetProfessional

3 known vulnerabilities (2 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
24.10.10.1 (Oct 10, 2024): no advisory affects it
Newest unaffected release
24.10.10.1 (Oct 10, 2024), the latest release
Advisories
3 · 2 high, 1 medium
Releases
10 since 21.10.30 (Nov 22, 2021)
Registry
NuGet
Releases read
Nov 8, 2026

Version timeline

  • CVE-2023-49289
    Affects 21.10.30 to 21.12.21.1 (21.12.22.1 is outside it)
  • CVE-2021-43853
    Affects 21.10.30 to 21.12.21.1 (21.12.22.1 is outside it)
  • CVE-2021-23758
    Affects 21.10.30 to 21.11.29 (21.12.8.1 is outside it)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 3

  • CVE-2023-49289Medium 6.3

    Cross-site Scripting in Ajax.NET Professional

    Affected: fixed in 21.12.22.1.

    Fixed in 21.12.22.1 (released Dec 22, 2021, 712 days before disclosure).

    The latest release, 24.10.10.1, is not affected.

  • Cross-Site Scripting in AjaxNetProfessional

    Affected: fixed in 21.12.22.1.

    Fixed in 21.12.22.1 (released Dec 22, 2021, the day of disclosure).

    The latest release, 24.10.10.1, is not affected.

  • CVE-2021-23758High 8.1 · KEV

    Deserialization of Untrusted Data

    Affected: fixed in 21.11.29.1.

    Fixed in 21.12.8.1 (released Dec 8, 2021, 5 days after disclosure, the advisory names 21.11.29.1, which was never published).

    The latest release, 24.10.10.1, is not affected.