GHSA-7h74-7vcw-4mwp
GHSA-7h74-7vcw-4mwp · Insecure deserialize Vulnerability in FLOW3
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Due to a missing signature (HMAC) for a request argument, an attacker could unserialize arbitrary objects within FLOW3. To our knowledge it is neither possible to inject code through this vulnerability, nor are there exploitable objects within the FLOW3 Base Distribution. However, there might be exploitable objects within user applications.
CVSS 3.7 · Faible · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
neos/flow Packagist
- Plages de versions concernées
- ECOSYSTEM: ≥ 1.0.0, < 1.0.4
Mettez à jour vers 1.0.4