Skip to content
OpenAdvisories

Archive

13 June 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2019-12799 Public exploit EPSS 54%

    Shopware Insecure Deserialization Vulnerability

    In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, which can result in an arbitrary deserialization if the right class is instantiated. An attacker can leverage this deser…