exploitDog

GHSA-cr72-56w8-rrw3

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2013-2184
https://movabletype.org/documentation/appendices/release-notes/movable-type-526-release-notes.html
http://seclists.org/oss-sec/2013/q2/560
http://seclists.org/oss-sec/2013/q2/568
http://www.debian.org/security/2015/dsa-3183

EPSS

Процентиль: 89%

0.03614

Низкий

CVE ID

Связанные уязвимости

CVE-2013-2184

ubuntu

больше 11 лет назад

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

CVE-2013-2184

nvd

больше 11 лет назад

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

CVE-2013-2184

debian

больше 11 лет назад

Movable Type before 5.2.6 does not properly use the Storable::thaw fun ...

EPSS

Процентиль: 89%

0.03614

Низкий

CVE ID