Remote Code Execution (RCE)

2018-06-2707:13:17

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.01 Low

EPSS

Percentile

83.3%

JSON

openpsa/midcom is vulnerable to remote code execution (RCE) attacks. The library does not sanitize the json string before deserialization, allowing a malicious user to inject and execute arbitrary code through it.

CPENameOperatorVersion
openpsa/midcomle9.4.0

CPE	Name	Operator	Version
	openpsa/midcom	le	9.4.0

References

0dd.zone/2018/05/31/OpenPSA-Object-Injection/

github.com/flack/openpsa/issues/191

0.01 Low

EPSS

Percentile

83.3%

JSON

Related for VERACODE:6858