Lucene search
+L

1 matches found

OSV
OSV
added 2023/09/08 12:17 p.m.31 views

GHSA-92RV-4J2H-8MJJ Snappy PHAR deserialization vulnerability

Issue On March 17th the vulnerability CVE-2023-28115 was disclosed, allowing an attacker to gain remote code execution through PHAR deserialization. To fix this issue, the version 1.4.2 was released with an additional check in the affected function to prevent the usage of the phar:// wrapper...

9.8CVSS9.7AI score0.01877EPSS
SaveExploits1References7
Rows per page
Query Builder