Lucene search
Veracode Vulnerability DatabaseVERACODE:37554HistoryOct 14, 2022 - 2:17 a.m.
Deserialization Of Untrusted Data
2022-10-1402:17:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
melis-front
vulnerability
deserialization
untrusted data
php code
software
EPSS
0.004
Percentile
73.8%
melisplatform/melis-front is vulnerable to deserialization of untrusted data. The vulnerability exists in multiple functions because of adding allowed_classes=false param to the unserialize function which allows an attacker to execute of arbitrary PHP code on the system.
Related
prion
prion
Authentication flaw
2022-10-12 23:15:00
osv
osv
melisplatform/melis-front vulnerable to deserialization of untrusted data
2022-10-11 20:45:42
CVE-2022-39298
2022-10-12 23:15:09
nvd
nvd
CVE-2022-39298
2022-10-12 23:15:09
github
github
melisplatform/melis-front vulnerable to deserialization of untrusted data
2022-10-11 20:45:42
cve
cve
CVE-2022-39298
2022-10-12 23:15:09
cvelist
cvelist
CVE-2022-39298 Deserialization of untrusted data in MelisFront
2022-10-12 00:00:00