SP LMS (com_splms) R Deserializes
T
Torsten.S
Are u aware of the follownig ?
https://github.com/advisories/GHSA-gf8c-xmwj-whrh
SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.
1 Answers
Order by
Oldest
Atick Eashrak Shuvo
Accepted AnswerThank you for bringing this to our attention.
Yes, we are aware of this security advisory. The reported vulnerability has already been addressed and fixed in the latest version of SP LMS.
To ensure your website remains secure, we strongly recommend updating SP LMS to the latest available version as soon as possible. If you are already running the latest version, no further action is required regarding this specific issue.
Please let us know if you need any assistance with the update process.
Thank you for your vigilance and cooperation.