En resumen
- CVE-2019-7725 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a nukeviet/nukeviet, nukeviet (nukeviet).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.6%, mayor que el 85.2% de las vulnerabilidades.
- Solución: actualizar a 4.3.04 o posterior.
Description
includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).
NVD description
includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).
Más vulnerabilidades de nukeviet/nukeviet
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free