CVE-2025-47784
Emlog vulnerable to Deserialization of Untrusted Data
概要
Emlog vulnerable to Deserialization of Untrusted Data
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause str_replace to replace the value of name_orig with empty, causing deserialization to fail and return false. Commit 9643250802188b791419e3c2188577073256a8a2 fixes the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com