GHSA-m2hp-5x78-74mg
GHSA-m2hp-5x78-74mg · Insecure Unserialize Vulnerability in FLOW3
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Due to a missing signature (HMAC) for a request argument, an attacker could unserialize arbitrary objects within FLOW3. To our knowledge it is neither possible to inject code through this vulnerability, nor are there exploitable objects within the FLOW3 Base Distribution. However, there might be exploitable objects within user applications.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
typo3/flow Packagist
- Plages de versions concernées
- ECOSYSTEM: ≥ 1.0.0, < 1.0.4
Mettez à jour vers 1.0.4