Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/17 8:2 p.m.17 views

CVE-2025-47784

Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause strreplace to replace the value of nameorig with empty, causing deserialization to fail and return false. Commit...

9.8CVSS6.9AI score0.00433EPSS
Exploits0References1
NVD
NVD
added 2025/05/15 8:16 p.m.10 views

CVE-2025-47784

Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause strreplace to replace the value of nameorig with empty, causing deserialization to fail and return false. Commit...

9.8CVSS0.00433EPSS
Exploits0References2
CVE
CVE
added 2025/05/15 7:21 p.m.36 views

CVE-2025-47784

Emlog (open-source website building system) is affected by CVE-2025-47784 in versions 2.5.13 and earlier, due to a deserialization vulnerability. A crafted nickname can trigger str_replace to set name_orig to an empty value, causing deserialization to fail and return false. The issue is mitigated...

9.8CVSS6.5AI score0.00433EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/05/15 7:21 p.m.24 views

CVE-2025-47784 Emlog vulnerable to Deserialization of Untrusted Data

Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause strreplace to replace the value of nameorig with empty, causing deserialization to fail and return false. Commit...

8.7CVSS0.00433EPSS
Exploits0References2
Rows per page
Query Builder