CVE-2019-16774

Published: Dic 12, 2019 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2019-0775 Aliases: GHSA-484f-743f-6jx2
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 4,4
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: low
User Interaction: required
Scope: changed
Confidentiality: low
Integrity: low
Availability: none
HIGH 7,5
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: partial

Description

AI Translation Available

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0038
Percentile
0,6th
Updated

EPSS Score Trend (Last 90 Days)

94

Improper Control of Generation of Code ('Code Injection')

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Integrity Confidentiality Availability Non-Repudiation
Potential Impacts:
Bypass Protection Mechanism Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands Hide Activities
Applicable Platforms
Languages: Interpreted
Technologies: AI/ML
Likelihood of Exploit: Medium
View CWE Details
502

Deserialization of Untrusted Data

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Availability Other
Potential Impacts:
Modify Application Data Unexpected State Dos: Resource Consumption (Cpu) Varies By Context
Applicable Platforms
Languages: Java, JavaScript, PHP, Python, Ruby
Technologies: AI/ML, ICS/OT, Not Technology-Specific
Likelihood of Exploit: Medium
View CWE Details
Application

Phpfastcache by Phpfastcache

Product Information
Vendor Phpfastcache
Product Phpfastcache
Version Range Affected
To 5.0.13 (exclusive)
cpe:2.3:a:phpfastcache:phpfastcache:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://github.com/PHPSocialNetwork/phpfastcache/commit/c45…
Patch Third Party Advisory
https://github.com/PHPSocialNetwork/phpfastcache/commit/c4527205cb7a402b595790c…
https://github.com/PHPSocialNetwork/phpfastcache/releases/t…
Release Notes Third Party Advisory
https://github.com/PHPSocialNetwork/phpfastcache/releases/tag/5.0.13
https://github.com/PHPSocialNetwork/phpfastcache/security/a…
Third Party Advisory
https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-484f-…
https://github.com/PHPSocialNetwork/phpfastcache/commit/c45…
Patch Third Party Advisory
https://github.com/PHPSocialNetwork/phpfastcache/commit/c4527205cb7a402b595790c…
https://github.com/PHPSocialNetwork/phpfastcache/releases/t…
Release Notes Third Party Advisory
https://github.com/PHPSocialNetwork/phpfastcache/releases/tag/5.0.13
https://github.com/PHPSocialNetwork/phpfastcache/security/a…
Third Party Advisory
https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-484f-…