Description
In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.
References (3)
Core 3
Core References
Third Party Advisory x_refsource_confirm
https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-484f-743f-6jx2
Patch, Third Party Advisory x_refsource_misc
https://github.com/PHPSocialNetwork/phpfastcache/commit/c4527205cb7a402b595790c74310791f5b04a1a4
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/PHPSocialNetwork/phpfastcache/releases/tag/5.0.13
Scores
CVSS v3
4.4
EPSS
0.0038
EPSS Percentile
59.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-502
CWE-94
Status
published
Products (2)
phpfastcache/phpfastcache
< 5.0.13
phpfastcache/phpfastcache
5.0.0 - 5.0.13Packagist
Published
Dec 12, 2019
Tracked Since
Feb 18, 2026