PT-2023-10175 · Corveda · Corveda Phpsandbox

Published 2023-12-19 · Updated 2024-05-17 · CVE-2014-125107

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Corveda PHPSandbox version 1.3.4

Description A critical issue was found in the String Handler component, leading to protection mechanism failure. The attack can be launched remotely. Upgrading to version 1.3.5 addresses this issue.

Recommendations For Corveda PHPSandbox version 1.3.4, upgrade to version 1.3.5 to resolve the issue.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2014-125107

GHSA-625P-JWCP-R2R5

Affected Products

Corveda Phpsandbox

References · 8

• https://github.com/Corveda/PHPSandbox/releases/tag/v1.3.5 · Patch
• https://github.com/Corveda/PHPSandbox/commit/48fde5ffa4d76014bad260a3cbab7ada3744a4cc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-125107 · Security Note
• https://osv.dev/vulnerability/GHSA-625p-jwcp-r2r5 · Vendor Advisory
• https://github.com/Corveda/PHPSandbox · Note
• https://vuldb.com/?ctiid.248270 · Note
• https://t.me/cvenotify/64088 · Telegram Post
• https://vuldb.com/?id.248270 · Note