Description
Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Full Page Cache Warmer for Magento 2 | Mirasvit / Full Page Cache Warmer for Magento 2 | >= 0, < 1.11.12 | affected |