Description

An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file overwriting upon destruction.

Remediation

References

CVE-2019-11458

Related Vulnerabilities

XWiki Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-26476)

MySQL CVE-2020-14559 Vulnerability (CVE-2020-14559)

WordPress Plugin Google Analytics MU Cross-Site Request Forgery (2.3.1)

WordPress Plugin WP-Recall-Registration, Profile, Commerce & More SQL Injection (16.26.5)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2204)

Severity

High

Classification

CVE-2019-11458 CWE-502 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities