SuiteCRM: PHAR deserialization vulnerability to code execution

2021-05-08来源 Snyk BlogEnglish
SuiteCRM: PHAR deserialization vulnerability to code execution
This advisory details a PHAR deserialization vulnerability that exists in SuiteCRM which could be leveraged by an authenticated administrator to execute commands on the underlying operating system.

原文：https://www.a8q9.cn/en/article/suitecrm-phar-deserialization-vulnerability-to-code-execution-1b45bf.html

相关文章