Lucene search
PRIOn knowledge basePRION:CVE-2023-2288HistoryMay 30, 2023 - 8:15 a.m.
Deserialization of untrusted data
2023-05-3008:15:00
PRIOn knowledge base
www.prio-n.com
1
otter plugin
deserialization
untrusted data
php vulnerability
file operations
The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP < 8.0 using the phar:// stream wrapper.
Related
wpvulndb
wpvulndb
Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
2023-05-02 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-2288
2023-05-30 08:15:10
cve
cve
CVE-2023-2288
2023-05-30 08:15:10
openvas
openvas
wpexploit
wpexploit
Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
2023-05-02 00:00:00
wordfence
wordfence