Description
An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file overwriting upon destruction.
Remediation
References
Related Vulnerabilities
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0704)
WordPress Plugin Bad Behavior Multiple Vulnerabilities (2.2.18)
WordPress Plugin WooCommerce Dynamic Pricing & Discounts Multiple Vulnerabilities (2.4.1)
WordPress Plugin WP Post Rating Security Bypass (2.4.6)
WordPress Plugin Advanced Booking Calendar SQL Injection (1.6.1)