Unrated

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/Syste...

CVE-2024-24725 First seen on SecPulse Mar 23, 2024

Original description The description as published by the source.

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/import_run.php&type=externalAssessment&step=4 URI.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web gibbonedu.org
web exploit-db.com

Key facts

Severity: Unrated
Published: Mar 23, 2024
First seen on SecPulse: Mar 23, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:02