Tiki · Tiki · CVE-2023-22850
**Name of the Vulnerable Software and Affected Versions**
Tiki versions prior to 24.1
**Description**
The issue allows PHP Object Injection in lib/sheet/grid.php due to an unserialize call when the Spreadsheets feature is enabled.
**Recommendations**
For versions prior to 24.1, update to version 24.1 or later to resolve the issue. As a temporary workaround, consider disabling the Spreadsheets feature until a patch is available.