CVE-2022-47083

8.8 highEPSS 18%

High (8.8) in spitfire project spitfire. EPSS 18% chance of exploitation in the next 30 days.

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 18% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2023-01-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

spitfire_project:spitfire

References

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5720.php
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5720.php

Check your stack JSON