Description
Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated administrators have a reachable call to unserialize in the Gdn_Format class.
Unscored
CVE-2018-19499
EUVD-2018-11188GHSA-2x7q-53h6-xvhj
Vanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated administrators have a reachable call to unse…
Published Nov 23, 2018 · Updated Aug 5, 2024 · Assigned by mitre