CVE-2021-23420

CVE-2021-23420 affects codeception/codeception (versions 4.0.0–4.1.21 and 3.0.x–3.1.2 are implied by the version bounds) where the RunProcess class can be used as a gadget to execute arbitrary commands during deserialization of unvalidated user input. This is a deserialization vulnerability in th...