CVE-2019-16774

In phpfastcache, the cookie driver is vulnerable to object injection in versions before 5.1.3. The root cause is unsafe handling during deserialization/inclusion via cookies, enabling crafted data to instantiate objects. Impact ranges from partial to high severity, with some sources indicating po...

GHSA-484F-743F-6JX2 Object injection in cookie driver in phpfastcache

Impact An possible object injection has been discovered in cookie driver prior 5.0.13 versions of 5.x releases. Patches The issue has been addressed by enforcing JSON conversion when deserializing Workarounds If you can't fix it, use another driver such as "Files" Filesystem References Fixing...

Object injection in cookie driver in phpfastcache

Impact An possible object injection has been discovered in cookie driver prior 5.0.13 versions of 5.x releases. Patches The issue has been addressed by enforcing JSON conversion when deserializing Workarounds If you can't fix it, use another driver such as "Files" Filesystem References Fixing...