Vendor

Perfex

1 brief RSS

critical advisory

Perfex CRM Unauthenticated Remote Code Execution via Insecure Deserialization

2 rules 1 TTP 2 IOCs

Perfex CRM is vulnerable to unauthenticated remote code execution (RCE) due to an autologin cookie being fed into unserialize().

Perfex CRM perfex-crm rce insecure-deserialization php

2r 1t 2i Feb 29, 2024