Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions.

What to know

What it is

Enable Media Replace versions up to 4.2.2 have a Subscriber PHP Object Injection vulnerability, allowing an attacker to inject PHP objects. This could lead to arbitrary code execution, potentially resulting in a complete compromise of the system.

Affected

{'products': ['Enable Media Replace'], 'packages': [], 'versions': ['<= 4.2.2']}

Fix

Upgrade to a version greater than 4.2.2

Exploitation

No known exploitation