Threats tagged 'ghsa-px5m-h76g-p7p8'

YesWiki versions prior to 4.6.6 contain a critical vulnerability in the Bazar form field calculator (CalcField.php) where user-defined formulas are validated by a complex recursive regular expression before being passed to PHP's eval() function. This approach is flawed, allowing attackers to cause a Denial of Service via PCRE stack overflow or potentially bypass validation to execute arbitrary PHP code remotely. The vulnerability impacts confidentiality, integrity, and availability of the affected system.