| शीर्षक | Adianti Adianti Framework < 8.1 Deserialization |
|---|
| विवरण | Adianti Framework has multiple PHP Object Injection vulnerabilities as a result of Deserialization of Untrusted Data.
(POP/) Gadget Chains exist in Adianti Framework (and its libraries) which allow Object Injection vulnerabilities to be exploited, for example to delete arbitrary files. Other attacks may be possible depending on what additional code is used in a given project.
Most functionality within Adianti Framework requires authentication by default, and all of the vulnerabilities require authentication. Low user-level privileges are sufficient. |
|---|
| स्रोत | ⚠️ https://gist.github.com/mcdruid/8412cfb55f443a1344ff41af0ce1b215 |
|---|
| उपयोगकर्ता | mcdruid (UID 79710) |
|---|
| सबमिशन | 03/04/2025 03:33 PM (2 साल पहले) |
|---|
| संयम | 14/04/2025 02:44 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 304645 [Adianti Framework तक 8.0 अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|