Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.

What to know

What it is

The EmojiNation application has a critical vulnerability (CVSS 9.8) allowing unauthenticated PHP Object Injection, which could lead to high impact including full control, high integrity impact, and high availability impact.

Affected

{'products': ['EmojiNation'], 'packages': [], 'versions': ['<= 1.0.12']}

Fix

Check the linked advisory for the concrete fix, but as a minimum, EmojiNation should be updated to a version greater than 1.0.12.

Exploitation

No known exploitation