CVE-2025-47784
Emlog vulnerable to Deserialization of Untrusted Data
Résumé
Emlog vulnerable to Deserialization of Untrusted Data
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause str_replace to replace the value of name_orig with empty, causing deserialization to fail and return false. Commit 9643250802188b791419e3c2188577073256a8a2 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com