CVE Intelligence

Vulnerabilidades do Themeisle Otter

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Themeisle Otter: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:themeisle:otter

CVE-2023-2288 Alta · 8.8 CWE-502 30/05/2023
Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP < 8.0 using the phar:// stream wrapper.