Threats tagged 'ghsa-rr7v-4fcc-qww3'

An unsafe deserialization vulnerability exists in MixPHP Framework versions 2.x through 2.2.17. The vulnerability arises because the session and cache handlers use PHP's unserialize() function on data retrieved from Redis within the RedisHandler object. This flaw can lead to critical impacts including full confidentiality, integrity, and availability compromise.