Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Spoon-library records in CISA KEVNo Spoon-library vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 47
Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02482 · Published 2019-08-26 · Fixed in 1.4.1 CWE-502
Open these records in search →