Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.

What to know

What it is

The Muzicon application has a critical vulnerability (CVSS 9.8) allowing unauthenticated PHP Object Injection, which could be used to gain high privileges, read, modify or delete data, and conduct arbitrary code execution.

Affected

{'products': ['Muzicon'], 'packages': [], 'versions': ['<= 1.15']}

Fix

Check the linked advisory for the concrete fix, but as a general rule, upgrade to a version greater than 1.15.

Exploitation

No known exploitation