CVE-2017-14141

2017-09-1915:29:00

Google

osv.dev

7.9 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.

CPENameOperatorVersion
servereqIX-9.18.0-rel
servereqIX-9.11.0-rel
servereqIX-9.3.0-rel
servereqJupiter-10.5.0-rel
servereqJupiter-10.6.0-rel
servereqMercury-13.1.0-rel
servereqJupiter-10.3.0-rel
servereqKajam-11.13.0-rel
servereqLynx-12.20.0-rel
servereqJupiter-10.9.0-rel

Name	Operator	Version
server	eq	IX-9.18.0-rel
server	eq	IX-9.11.0-rel
server	eq	IX-9.3.0-rel
server	eq	Jupiter-10.5.0-rel
server	eq	Jupiter-10.6.0-rel
server	eq	Mercury-13.1.0-rel
server	eq	Jupiter-10.3.0-rel
server	eq	Kajam-11.13.0-rel
server	eq	Lynx-12.20.0-rel
server	eq	Jupiter-10.9.0-rel