Deserialization Of Untrusted Data

2024-03-0510:51:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

phppgadmin

deserialization

vulnerability

remote code execution

untrusted data

php

unserialize function

tables.php

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

Low

EPSS

0.002

Percentile

61.6%

JSON

phpPgAdmin is vulnerable to a deserialization flaw in untrusted data, potentially leading to remote code execution. The vulnerability is due to user-controlled data being directly passed to the PHP ‘unserialize()’ function in multiple instances. For example, the ‘ma[]’ POST parameter in the functionality to manage tables in ‘tables.php’ is deserialized without proper validation, creating a potential avenue for remote code execution.