Home > Vulnerability Database > CVE-2024-29800

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-29800

Date: May 9, 2024

Deserialization of Untrusted Data vulnerability in Timber Team & Contributors Timber.This issue affects Timber: from n/a through 1.23.0.

Severity Score

8.0

Related Resources (8)

Url: https://github.com/FriendsOfPHP/security-advisories/blob/master/timber/timber/CVE-2024-29800.yaml

Url: https://github.com/timber/timber/issues/2971

Url: https://patchstack.com/database/vulnerability/timber-library/wordpress-timber-plugin-1-23-0-deserialization-of-untrusted-data-vulnerability?_s_id=cve

Url: https://github.com/timber/timber

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-29800

Url: https://github.com/timber/timber/commit/13c6b0f60346304f2eed4da1e0bb51566518de4a

Url: https://github.com/timber/timber/security/advisories/GHSA-6363-v5m4-fvq3

Url: https://www.mend.io/vulnerability-database/CVE-2024-29800

Severity Score

8.0

Weakness Type (CWE)

Deserialization of Untrusted Data

CWE-502

External Control of File Name or Path

CWE-73

CVSS v3.1

Base Score:	8.0
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	HIGH
User Interaction (UI):	NONE
Scope (S):	CHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Do you need more information?

Contact Us