Unscored CVE-2017-18375 EUVD-2017-9491GHSA-p3j4-f85x-cw86

Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php.

Published May 24, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	ampache	No fix yet	—

References

https://fenceposterror.github.io/2017/06/16/Hacking-For-Fun-And-Non-Profit.html