Lucene search

K
cvelistMitreCVELIST:CVE-2014-1691
HistoryApr 01, 2014 - 3:00 p.m.

CVE-2014-1691

2014-04-0115:00:00
mitre
www.cve.org
4

AI Score

7.3

Confidence

Low

EPSS

0.941

Percentile

99.2%

The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form.