Spitfire Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Spitfire Project records in CISA KEV

No Spitfire Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Spitfire 1 record MEDIUM

Records

1 record in Spitfire · all components

TI-2022-23304 CVE-2022-47083 · GHSA-vm3j-g376-5mpf

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475…

MEDIUM 56

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.18233 Published 2023-01-10 No fix listed CWE-502

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0