CVE-2020-24036

CVE-2020-24036

EPSS 2.9%

PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://forkcms.com http://seclists.org/fulldisclosure/2021/Mar/31 https://tech.feedyourhead.at/content/ForkCMS-PHP-Object-Injection-CVE-2020-24036 https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-04