Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47433

HistoryJun 10, 2024 - 6:00 a.m.

Deserialization Of Untrusted Data

2024-06-1006:00:54

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2

deserialization

untrusted data

vulnerability

improper handling

phar archive

arbitrary code

attackers

software

AI Score

7.7

Confidence

High

typo3/phar-stream-wrapper is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper handling of user-supplied Phar achive data before deserialization, which allows attackers to manipulate the serialized data to execute arbitrary code.

AI Score

7.7

Confidence

High