Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-40619
HistorySep 20, 2023 - 12:00 a.m.

CVE-2023-40619

2023-09-2000:00:00
mitre
github.com
phppgadmin
remote code execution
untrusted data
deserialization

AI Score

7.8

Confidence

Low

EPSS

0.004

Percentile

73.2%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP ‘unserialize()’ function in multiple places. An example is the functionality to manage tables in ‘tables.php’ where the ‘ma[]’ POST parameter is deserialized.

AI Score

7.8

Confidence

Low

EPSS

0.004

Percentile

73.2%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total