Unrated
Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call.
CVE-2023-22850
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web karmainsecurity.com
- web tiki.org