Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions.

What to know

What it is

FunnelKit Automations versions up to 3.8.6.1 have an unauthenticated PHP Object Injection vulnerability. An attacker could exploit this to gain high privileges, inject code, or cause a denial of service.

Affected

{'products': ['FunnelKit Automations'], 'packages': [], 'versions': ['<= 3.8.6.1']}

Fix

Check the linked advisory for the concrete fix.

Exploitation

No known exploitation