CVE-2022-35223

Publication date

2022-08-02 15:21:11

Family

twcert

State

PUBLISHED

Description

EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker to execute arbitrary code, manipulate system command or interrupt service.