| Название | Laravel5.1 Unserialize RCE |
|---|
| Описание | Laravel has remote command execution, which can directly obtain system permissions, which is very harmful.
The impact of insecure deserialization can be severe, as it provides an entry point, resulting in a massive increase in the attack surface. It allows attackers to reuse existing application code in harmful ways, leading to many other vulnerabilities such as remote code execution.
Insecure deserialization can lead to privilege escalation, access to arbitrary files, and denial of service attacks even when remote code execution is not possible. |
|---|
| Источник | ⚠️ https://github.com/beicheng-maker/vulns/issues/3 |
|---|
| Пользователь | cppuzhang (UID 31043) |
|---|
| Представление | 17.08.2022 07:14 (4 лет назад) |
|---|
| Модерация | 18.08.2022 09:24 (1 day later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 206688 [Laravel 5.1 эскалация привилегий] |
|---|
| Баллы | 20 |
|---|