CVE-2023-46990
Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeRepl...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com