CVE-2023-6654
1 advisory.
Packagist/phpems/phpems CVE-2023-6654: medium 6.3
PHPEMS Deserialization of Untrusted Data vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | - | 6.1.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-5rv2-vvmf-f7w8
- https://nvd.nist.gov/vuln/detail/CVE-2023-6654
- https://github.com/oiuv/phpems
- https://github.com/oiuv/phpems/blob/a4a049362a0250c4b1762464b34d90ed881fef19/lib/session.cls.php
- https://note.zhaoj.in/share/jw4Hp9cq7T69
- https://vuldb.com/?ctiid.247357
- https://vuldb.com/?id.247357
CVE-2023-6654 · published · modified · JSON