Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4890
HistoryJan 16, 2023 - 1:15 p.m.

Deserialization of untrusted data

2023-01-1613:15:00
PRIOn knowledge base
www.prio-n.com
6
deserialization
vulnerability
abhilash1985
predictapp
cookie handler
remote attack
patch
vdb-218387

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

A vulnerability, which was classified as critical, has been found in abhilash1985 PredictApp. This issue affects some unknown processing of the file config/initializers/new_framework_defaults_7_0.rb of the component Cookie Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The patch is named b067372f3ee26fe1b657121f0f41883ff4461a06. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218387.

CPENameOperatorVersion
predictappeq< 2022320

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

Related for PRION:CVE-2022-4890