Описание
An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.2.8 (включая)
cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*
EPSS
Процентиль: 75%
0.00905
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection.
EPSS
Процентиль: 75%
0.00905
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-502