Описание
Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashes()).
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.8.8h+ds1-8 |
| esm-apps/xenial | not-affected | 0.8.8f+ds1-4ubuntu4.16.04.1 |
| esm-infra-legacy/trusty | released | 0.8.8b+dfsg-5ubuntu0.2 |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| trusty | released | 0.8.8b+dfsg-5ubuntu0.2 |
| trusty/esm | released | 0.8.8b+dfsg-5ubuntu0.2 |
| upstream | released | 1.0.0,0.8.8e |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE |
Показывать по
EPSS
6.5 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashes()).
Cacti before 1.0.0 allows remote authenticated users to conduct PHP ob ...
Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashes()).
EPSS
6.5 Medium
CVSS2
8.8 High
CVSS3