1 matches found
Grav has Insecure Deserialization in File Cache
Insecure Deserialization in File Cache - Severity: High - CWE: CWE-502 - Location: system/src/Grav/Framework/Cache/Adapter/FileCache.php - Sink: unserialize$value, 'allowedclasses' = true Affected versions - Affected: = 1.7.44 and true allows object instantiation and does not constrain classes. P...
5CVSS5.8AI score0.00224EPSS
SaveExploits0References9Affected Software1
20