Lucene search
Dennis BrinkrolfPATCHSTACK:444EFB7D5D8F266E7FB72E947CA2302DHistoryJun 22, 2021 - 12:00 a.m.
WordPress CiviCRM plugin <= 5.24.2 - Authenticated Phar Deserialization vulnerability
2021-06-2200:00:00
Dennis Brinkrolf
patchstack.com
6
0.001 Low
EPSS
Percentile
42.0%
Authenticated Phar Deserialization vulnerability discovered by Dennis Brinkrolf (SonarSource) in WordPress CiviCRM plugin (versions <= 5.24.2).
Solution
Update the WordPress CiviCRM plugin to the latest available version (at least 5.24.3).
Related
osv
osv
CVE-2020-36388
2021-06-17 19:15:07
BIT-civicrm-2020-36388
2024-03-06 10:51:07
prion
prion
Design/Logic Flaw
2021-06-17 19:15:00
cvelist
cvelist
CVE-2020-36388
2021-06-17 00:00:00
cve
cve
CVE-2020-36388
2021-06-17 19:15:07
wpvulndb
wpvulndb
CiviCRM < 5.24.3 - Authenticated Phar Deserialization
2021-06-22 00:00:00
ubuntucve
ubuntucve
CVE-2020-36388
2021-06-17 00:00:00
debiancve
debiancve
CVE-2020-36388
2021-06-17 19:15:07
nvd
nvd
CVE-2020-36388
2021-06-17 19:15:07
sonarsource
sonarsource
CiviCRM 5.22.0 - Code Execution Vulnerability Chain Explained
2021-06-22 00:00:00