| عنوان | Laravel5.1 Unserialize RCE |
|---|
| الوصف | Laravel has remote command execution, which can directly obtain system permissions, which is very harmful.
The impact of insecure deserialization can be severe, as it provides an entry point, resulting in a massive increase in the attack surface. It allows attackers to reuse existing application code in harmful ways, leading to many other vulnerabilities such as remote code execution.
Insecure deserialization can lead to privilege escalation, access to arbitrary files, and denial of service attacks even when remote code execution is not possible. |
|---|
| المصدر | ⚠️ https://github.com/beicheng-maker/vulns/issues/3 |
|---|
| المستخدم | cppuzhang (UID 31043) |
|---|
| ارسال | 17/08/2022 07:14 AM (4 سنوات منذ) |
|---|
| الاعتدال | 18/08/2022 09:24 AM (1 day later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 206688 [Laravel 5.1 تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|