CVE-2023-7032

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain higher privileges by providing a harmful serialized object.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Jan 9, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-70335.3Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L CVE-2023-70355.4A vulnerability was found in automad up to 1.10.9 and classified as problematic. Affected by this issue is some unknown functionality of the CVE-2023-70365.4A vulnerability was found in automad up to 1.10.9. It has been classified as problematic. This affects the function upload of the file FileC CVE-2023-70378.8A vulnerability was found in automad up to 1.10.9. It has been declared as critical. This vulnerability affects the function import of the f CVE-2023-70386.5A vulnerability was found in automad up to 1.10.9. It has been rated as problematic. This issue affects some unknown processing of the file CVE-2023-70399.8A vulnerability classified as critical has been found in Byzoro S210 up to 20231210. Affected is an unknown function of the file /importexpo CVE-2023-70406.5A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this vulnerability is an unknown CVE-2023-70415.4A vulnerability, which was classified as critical, has been found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this issue is some CVE-2023-70425.5A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c CVE-2023-70435.5Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\Ne CVE-2023-70445.4The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to St CVE-2023-70456.1A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By l