← Volver al buscador de CVEs

CVE-2026-42473

MixPHP Framework

Descripción

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on data from the filesystem in the FileHandler object.

CVSS 9.8EPSS 0.38%Riesgo 1.01
Ver fuente
Publicación
2026-05-01 16:16:31
Versiones afectadas
<=2.2.17
Tipo
Package
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H