6 matches found
CVE-2024-47055: Missing Authorization
SummaryThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated user to clone segments without proper authorization checks. Insecure Direct Object Reference IDOR / Missing Authorization: A missing...
CVE-2018-11569
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2...
CVE-2018-11569
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2...
Deserialization of untrusted data
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2...
CVE-2018-11569
CVE-2018-11569 affects Eventum, specifically the PHP file list handling in 3.5.0 (Controller/ListController.php). The issue is described as a deserialization of untrusted data vulnerability, with a confirmed remediation in Eventum 3.5.2. Connected documents consistently identify the affected prod...