CVE-2022-47083

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending…

published January 10, 2023

CVSS
—
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18233 · 97.2th percentile
Published
2023-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending…
    cvelistv5