Lucene search
PRIOn knowledge basePRION:CVE-2022-39297HistoryOct 12, 2022 - 11:15 p.m.
Authentication flaw
2022-10-1223:15:00
PRIOn knowledge base
www.prio-n.com
3
meliscms
unauthenticated access
remote code execution
deserialization
upgrade
nvd
MelisCms provides a full CMS for Melis Platform, including templating system, drag’n’drop of plugins, SEO and many administration tools. Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-cms, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-cms >= 5.0.1. This issue was addressed by restricting allowed classes when deserializing user-controlled data.
Related
cve
cve
CVE-2022-39297
2022-10-12 23:15:09
nvd
nvd
CVE-2022-39297
2022-10-12 23:15:09
github
github
melisplatform/melis-cms vulnerable to deserialization of untrusted data
2022-10-11 20:45:54
osv
osv
melisplatform/melis-cms vulnerable to deserialization of untrusted data
2022-10-11 20:45:54
CVE-2022-39297
2022-10-12 23:15:09
cvelist
cvelist
CVE-2022-39297 Deserialization of untrusted data in MelisCms
2022-10-12 00:00:00
veracode
veracode
Deserialization Of Untrusted Data
2022-10-14 03:23:30