| タイトル | Laravel5.1 Unserialize RCE |
|---|
| 説明 | Laravel has remote command execution, which can directly obtain system permissions, which is very harmful.
The impact of insecure deserialization can be severe, as it provides an entry point, resulting in a massive increase in the attack surface. It allows attackers to reuse existing application code in harmful ways, leading to many other vulnerabilities such as remote code execution.
Insecure deserialization can lead to privilege escalation, access to arbitrary files, and denial of service attacks even when remote code execution is not possible. |
|---|
| ソース | ⚠️ https://github.com/beicheng-maker/vulns/issues/3 |
|---|
| ユーザー | cppuzhang (UID 31043) |
|---|
| 送信 | 2022年08月17日 07:14 (4 年 ago) |
|---|
| モデレーション | 2022年08月18日 09:24 (1 day later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 206688 [Laravel 5.1 特権昇格] |
|---|
| ポイント | 20 |
|---|