| Título | Laravel5.1 Unserialize RCE |
|---|
| Descrição | Laravel has remote command execution, which can directly obtain system permissions, which is very harmful.
The impact of insecure deserialization can be severe, as it provides an entry point, resulting in a massive increase in the attack surface. It allows attackers to reuse existing application code in harmful ways, leading to many other vulnerabilities such as remote code execution.
Insecure deserialization can lead to privilege escalation, access to arbitrary files, and denial of service attacks even when remote code execution is not possible. |
|---|
| Fonte | ⚠️ https://github.com/beicheng-maker/vulns/issues/3 |
|---|
| Utilizador | cppuzhang (UID 31043) |
|---|
| Submissão | 17/08/2022 07h14 (há 4 anos) |
|---|
| Moderação | 18/08/2022 09h24 (1 day later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 206688 [Laravel 5.1 Elevação de Privilégios] |
|---|
| Pontos | 20 |
|---|