Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/17 8:02 p.m.29 views

CVE-2025-47784

Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause strreplace to replace the value of nameorig with empty, causing deserialization to fail and return false. Commit...

9.8CVSS6.9AI score0.00493EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/15 8:16 p.m.17 views

CVE-2025-47784

Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause strreplace to replace the value of nameorig with empty, causing deserialization to fail and return false. Commit...

9.8CVSS0.00493EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/15 7:21 p.m.45 views

CVE-2025-47784

Emlog (open-source website building system) is affected by CVE-2025-47784 in versions 2.5.13 and earlier, due to a deserialization vulnerability. A crafted nickname can trigger str_replace to set name_orig to an empty value, causing deserialization to fail and return false. The issue is mitigated...

9.8CVSS6.5AI score0.00493EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/05/15 7:21 p.m.33 views

CVE-2025-47784 Emlog vulnerable to Deserialization of Untrusted Data

Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause strreplace to replace the value of nameorig with empty, causing deserialization to fail and return false. Commit...

8.7CVSS0.00493EPSS
SaveExploits0References2
Rows per page
Query Builder