CVE-2023-2288 — Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnera…
Published: 2023-05-30 · CVSS: 8.8 · CVSS 3.1
The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP < 8.0 using the phar:// stream wrapper.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7