Slim vulnerable to PHP object injection

높음 7.5CVE-2015-2171 · GHSA-74mf-vjpg-9xh7 · Published 30/03/2015 · updated 17/06/2026

요약

CVE-2015-2171은(는) slim/slim, slim (slimframework)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 2.5%, 전체 취약점의 84.8%보다 높음.
조치: 2.6.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
slim/slim Packagist	`< 2.6.0`	`2.6.0`
slim slimframework	`≤ 2.5.0`	No fix yet

Description

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data.

NVD description

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data.

References

nvd.nist.gov/vuln/detail/CVE-2015-2171 · ADVISORY
slimphp/Slim · WEB
slimphp/Slim commit 9fa6514 · WEB
FriendsOfPHP/security-advisories · WEB
slimphp/Slim · PACKAGE
web.archive.org/web/20200229032229/http://www.securityfocus.com/bid/70087 · WEB
seclists.org/fulldisclosure/2015/Mar/16 · WEB
slimframework.com/2015/03/01/version-260.html · WEB
securityfocus.com/bid/70087

slim/slim의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free