PT-2017-16666
CVE-2017-5677
·
تاريخ النشر
2017-02-06
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PEAR HTML AJAX versions 0.3.0 through 0.5.7
Description
The issue is related to a PHP Object Injection Vulnerability in the PHP Serializer, which allows remote code execution. The root cause is attributed to an incorrect regular expression.
Recommendations
For versions 0.3.0 through 0.5.7, update to a version that fixes the PHP Object Injection Vulnerability in the PHP Serializer to prevent remote code execution.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾