PT-2017-16666
CVE-2017-5677
·
Publicado
2017-02-06
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PEAR HTML AJAX versions 0.3.0 through 0.5.7
Description
The issue is related to a PHP Object Injection Vulnerability in the PHP Serializer, which allows remote code execution. The root cause is attributed to an incorrect regular expression.
Recommendations
For versions 0.3.0 through 0.5.7, update to a version that fixes the PHP Object Injection Vulnerability in the PHP Serializer to prevent remote code execution.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾