Tastyigniter
Approved changes feed: RSS · Atom
cpe:2.3:a:tastyigniter:tastyigniter:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tastyigniter (300efc4c-d5ae-5431-acb0-8ca60d8fcdbe) |
|---|---|
| Product | Tastyigniter (0a3808fb-336c-5726-ad2a-bc6d9d8d055f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tastyigniter/tastyigniter |
purl2cpe | 2026-06-01 10:15:08.120814 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-29001 |
vulnerable | 2026-11-03 10:15:35.509300 |
TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization
HIGH (7.2)
TastyIgniter through 4.4.5 contains a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP object as a settings value, which is stored unsanitized and later unserialized by getValueAttribute() when the setting is read. Attackers can submit a serialized gadget chain, such as one generated via phpggc, through the admin settings form (for example the maintenance_message setting loaded by CheckMaintenance.php) to achieve arbitrary operating-system command execution as the PHP application process user, with the impact persisting until the value is overwritten.
Published: 2026-10-21T21:03:25.481Z
Updated: 2026-11-08T14:01:51.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38256 |
vulnerable | 2026-06-08 05:47:16.069411 |
Details available
TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2022-09-08T17:32:14.000Z
Updated: 2024-08-03T10:45:53.081Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0602 |
vulnerable | 2026-06-08 05:39:10.369028 |
Cross-site Scripting (XSS) - DOM in tastyigniter/tastyigniter
HIGH (7.4)
Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0.
Published: 2022-04-05T15:55:10.000Z
Updated: 2024-08-02T23:32:46.537Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.