1 matches found
GHSA-92RV-4J2H-8MJJ Snappy PHAR deserialization vulnerability
Issue On March 17th the vulnerability CVE-2023-28115 was disclosed, allowing an attacker to gain remote code execution through PHAR deserialization. To fix this issue, the version 1.4.2 was released with an additional check in the affected function to prevent the usage of the phar:// wrapper...
9.8CVSS9.7AI score0.01877EPSS
SaveExploits1References7
20