PT-2024-10976 · Oxwall · Oxwall

Published

2024-05-01

·

Updated

2024-05-02

·

CVE-2021-36594

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Oxwall version 1.8.7
Description The issue allows an attacker to execute arbitrary commands via Phar deserialization or internal API server or via the url parameter.
Recommendations For Oxwall version 1.8.7, update to a version that fixes this issue, as using the url parameter can lead to exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-36594

Affected Products

Oxwall