Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

What to know

What it is

Le Truffe versions up to 1.1.7 have an unauthenticated PHP Object Injection vulnerability. An attacker could exploit this to gain high privileges, read, modify or delete data, or perform other actions.

Affected

{'products': ['Le Truffe'], 'packages': [], 'versions': ['<= 1.1.7']}

Fix

Check the linked advisory for the fix, as none is provided here.

Exploitation

No known exploitation