CVE-2021-36231

Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands…

published August 31, 2021

CVSS
—
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02618 · 85.4th percentile
Published
2021-08-31T17:41Z
EPSS history
Timeline
  • 31 AUG 17:41Z
    Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands…
    cvelistv5