CVE-2024-49218: Al Imran Akash Recently, десериализация

Описание

Оригинално описание

Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently recently-viewed-most-viewed-and-sold-products-for-woocommerce allows Object Injection.This issue affects Recently: from n/a through <= 1.1.

Засегнати продукти

• Al Imran Akash Recently: до 1.1
• recently_project recently: до 1.1

Вид слабост

• CWE-502 Десериализация на ненадеждни данни

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-49218
• https://nvd.nist.gov/vuln/detail/CVE-2024-49218
• https://patchstack.com/database/Wordpress/Plugin/recently-viewed-most-viewed-and-sold-products-for-woocommerce/vulnerability/wordpress-recently-plugin-1-1-php-object-injection-vulnerability?_s_id=cve