Lucene search
+L

26 matches found

Cvelist
Cvelist
•added 2019/12/12 11:05 p.m.•34 views

CVE-2019-16774 Object injection in cookie driver

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver...

4.4CVSS9.6AI score0.01228EPSS
SaveExploits0References3
CVE
CVE
•added 2019/12/12 11:05 p.m.•83 views

CVE-2019-16774

In phpfastcache, the cookie driver is vulnerable to object injection in versions before 5.1.3. The root cause is unsafe handling during deserialization/inclusion via cookies, enabling crafted data to instantiate objects. Impact ranges from partial to high severity, with some sources indicating po...

9.8CVSS7AI score0.01228EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2019/12/12 11:05 p.m.•56 views

CVE-2019-16774

Removed by vendor...

9.8CVSS9.3AI score0.01228EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2019/12/12 10:50 p.m.•103 views

Object injection in cookie driver in phpfastcache

Impact An possible object injection has been discovered in cookie driver prior 5.0.13 versions of 5.x releases. Patches The issue has been addressed by enforcing JSON conversion when deserializing Workarounds If you can't fix it, use another driver such as "Files" Filesystem References Fixing...

9.8CVSS1.7AI score0.01228EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2019/12/12 10:50 p.m.•67 views

GHSA-484F-743F-6JX2 Object injection in cookie driver in phpfastcache

Impact An possible object injection has been discovered in cookie driver prior 5.0.13 versions of 5.x releases. Patches The issue has been addressed by enforcing JSON conversion when deserializing Workarounds If you can't fix it, use another driver such as "Files" Filesystem References Fixing...

4.4CVSS9.7AI score0.01228EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/12 12:00 a.m.•2 views

CVE-2019-16774: Improper Control of Generation of Code

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver...

9.8CVSS8.2AI score0.01228EPSS
SaveExploits0References3
Rows per page
Query Builder