Lucene search
Veracode Vulnerability DatabaseVERACODE:47260HistoryMay 30, 2024 - 6:03 a.m.
Deserialization Of Untrusted Data
2024-05-3006:03:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
deserialization
untrusted data
validation
object injection
php
malicious scripts
security
7.4 High
AI Score
Confidence
High
symbiote/silverstripe-multivaluefield is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to inadequate validation of user input, as well as object injection caused by support for handling PHP objects as values, which allows an attacker to inject malicious scripts.
7.4 High
AI Score
Confidence
High