PT-2017-16666
CVE-2017-5677
·
Published
2017-02-06
·
Updated
2019-10-03
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PEAR HTML AJAX versions 0.3.0 through 0.5.7
Description
The issue is related to a PHP Object Injection Vulnerability in the PHP Serializer, which allows remote code execution. The root cause is attributed to an incorrect regular expression.
Recommendations
For versions 0.3.0 through 0.5.7, update to a version that fixes the PHP Object Injection Vulnerability in the PHP Serializer to prevent remote code execution.
Found an issue in the description? Have something to add? Feel free to write us 👾