Executive brief
PHAR deserialization allowing remote code execution
Affected products
- Packagist knplabs/knp-snappy
Junglewise Threat Intelligence
CVE-2023-28115: PHAR deserialization allowing remote code execution
CVE-2023-28115 · Severity: low · CVSS 3.1 · Published 2023-03-17
Technologies: knplabs/knp-snappy (Packagist). Vendors: Packagist.