CVE-2018-1000641

Опубликовано: 20 авг. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information.

Ссылки

https://0dd.zone/2018/08/05/YesWiki-Object-Injection/
Third Party Advisory
https://github.com/YesWiki/yeswiki/issues/356
Issue Tracking
Patch
Third Party Advisory
https://0dd.zone/2018/08/05/YesWiki-Object-Injection/
Third Party Advisory
https://github.com/YesWiki/yeswiki/issues/356
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:yeswiki:yeswiki:2012-10-22-1:*:*:*:*:*:*:*

cpe:2.3:a:yeswiki:yeswiki:2013-10-17-1:*:*:*:*:*:*:*

cpe:2.3:a:yeswiki:yeswiki:2016-03-17-1:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00819

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502

Связанные уязвимости

GHSA-q5vv-hjfg-5v6r