CVE-2021-23420

This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializing user input without validation...

PT-2021-15508

Name of the Vulnerable Software and Affected Versions codeception/codeception versions 4.0.0 through 4.1.21 codeception/codeception versions prior to 3.1.3 Description The issue affects systems that deserialize user input without validation, allowing the RunProcess class to be leveraged as a gadg...

CVE-2021-23420: Deserialization of Untrusted Data

This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializing user input without validation...