exploitDog

GHSA-cr72-56w8-rrw3

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

Ссылки

EPSS

Процентиль: 87%

0.03196

Низкий

CVE ID

Связанные уязвимости

CVE-2013-2184

ubuntu

почти 11 лет назад

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

CVE-2013-2184

nvd

почти 11 лет назад

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

CVE-2013-2184

debian

почти 11 лет назад

Movable Type before 5.2.6 does not properly use the Storable::thaw fun ...

EPSS

Процентиль: 87%

0.03196

Низкий

CVE ID