PT-2019-12711
CVE-2019-12240
·
تاريخ النشر
2019-05-20
·
تاريخ التحديث
2019-08-23
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Virim plugin version 0.4
Description
The issue allows for Insecure Deserialization via
s values, t values, or c values in the graph.php file.Recommendations
For Virim plugin version 0.4, consider disabling the deserialization functionality in
graph.php until a patch is available to prevent exploitation. Restrict access to the graph.php file to minimize the risk of exploitation. Avoid using the s values, t values, or c values in the affected file until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾