GCVE - cpe:2.3:a:servicestack:servicestack:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:servicestack:servicestack:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Servicestack (`5a0e98bb-df38-570b-b390-6a1f9c0066ee`)
Product	Servicestack (`b1d362b1-356f-549c-a34b-cdf1d5d26797`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/servicestack/servicestack`	purl2cpe	2026-06-01 10:14:06.296927
`pkg:nuget/ServiceStack`	purl2cpe	2026-06-01 10:14:06.296930
`pkg:sourceforge/servicestack.mirror`	purl2cpe	2026-06-01 10:14:06.296933

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-6445`	vulnerable	2026-06-08 07:43:15.073303	ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability HIGH (8.1) ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation of the FindType method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25837. Published: 2025-06-25T17:42:05.996Z Updated: 2025-06-25T18:02:27.900Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-25-416/ https://docs.servicestack.net/releases/v8_06#reported-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6444`	vulnerable	2026-06-08 07:43:15.072946	ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability MEDIUM (5.9) ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation of the GetErrorResponse method. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to relay NTLM credentials in the context of the current user. Was ZDI-CAN-25834. Published: 2025-06-25T17:41:36.933Z Updated: 2025-06-25T18:09:55.731Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-25-415/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28042`	vulnerable	2026-06-08 05:23:53.706054	Details available ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature. Published: 2020-11-01T04:50:48.000Z Updated: 2024-08-04T16:33:56.869Z Open on db.gcve.eu Reference links https://forums.servicestack.net/t/servicestack-v5-9-2-released/8850 https://github.com/ServiceStack/ServiceStack/commit/540d4060e877a03ae95343c1a8560a26768585ee https://www.shielder.it/blog/2020/11/re-discovering-a-jwt-authentication-bypass-in-servicestack/ https://www.shielder.it/advisories/servicestack-jwt-signature-verification-bypass/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.