Lucene search

K
osvGoogleOSV:CVE-2019-14466
HistoryDec 31, 2019 - 6:15 p.m.

CVE-2019-14466

2019-12-3118:15:11
Google
osv.dev
2

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.3%

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie.

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.3%