| 标题 | Laravel5.1 Unserialize RCE |
|---|
| 描述 | Laravel has remote command execution, which can directly obtain system permissions, which is very harmful.
The impact of insecure deserialization can be severe, as it provides an entry point, resulting in a massive increase in the attack surface. It allows attackers to reuse existing application code in harmful ways, leading to many other vulnerabilities such as remote code execution.
Insecure deserialization can lead to privilege escalation, access to arbitrary files, and denial of service attacks even when remote code execution is not possible. |
|---|
| 来源 | ⚠️ https://github.com/beicheng-maker/vulns/issues/3 |
|---|
| 用户 | cppuzhang (UID 31043) |
|---|
| 提交 | 2022-08-17 07時14分 (4 年前) |
|---|
| 管理 | 2022-08-18 09時24分 (1 day later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 206688 [Laravel 5.1 权限提升] |
|---|
| 积分 | 20 |
|---|