Vulnerability in Sixapart Movable Type

CVE-2013-2184

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

EPSS: 0.036 (88.3th percentile) — read the EPSS interpretation.

Affected products

Sixapart Movable_type
N/a — versions n/a

Weakness classification (CWE)

CWE-17

References

secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_MISC, Vendor Advisory)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)