Lucene search

K
nvd[email protected]NVD:CVE-2024-34515
HistoryMay 05, 2024 - 9:15 p.m.

CVE-2024-34515

2024-05-0521:15:55
web.nvd.nist.gov
image-optimizer
phar deserialization
file_exists protocol

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

image-optimizer before 1.7.3 allows PHAR deserialization, e.g., the phar:// protocol in arguments to file_exists().

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

Related for NVD:CVE-2024-34515