CVE-2017-18375: High severity ampache vulnerability
Published May 24, 2019
·Updated
Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php.
Affected Software
1 affected component
Ampache Ampache=3.8.3
Event History
May 24, 2019
CVE Published
via MITRE·05:42 PM
Data Sourced
via MITRE·05:42 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18375?
CVE-2017-18375 has a medium severity rating due to the potential for PHP Object Instantiation attacks.
2
How do I fix CVE-2017-18375?
To fix CVE-2017-18375, update Ampache to the latest version or apply the relevant security patches.
3
Which versions of Ampache are affected by CVE-2017-18375?
CVE-2017-18375 affects Ampache version 3.8.3.
4
What impact does CVE-2017-18375 have on users?
CVE-2017-18375 could allow unauthorized users to instantiate PHP objects, potentially leading to further exploitation.
5
What components of Ampache are involved in CVE-2017-18375?
CVE-2017-18375 involves the democratic.ajax.php and democratic.class.php files in Ampache.