CVE-2020-12471: Mono Monox

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.

Affected products

• Mono Monox: up to and including 5.1.40.5152

Published 2020-04-29. Last modified 2026-06-17.