Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/22 12:00 a.m.•5 views

CVE-2024-1750: Deserialization of Untrusted Data

A vulnerability, which was classified as critical, was found in TemmokuMVC up to 2.3. Affected is the function getimgurl/imgreplace in the library lib/imagesgetdown.php of the component Image Download Handler. The manipulation leads to deserialization. It is possible to launch the attack remotely...

8.1CVSS4.7AI score0.0078EPSS
SaveExploits0References2
Rows per page
Query Builder