← All advisories

Critical severity9.8NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15521

CVE-2019-15521

Description

Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
spoon/libraryPackagist	< 1.4.1	1.4.1

Affected products

4

Fork CMS/Fork CMS
cpe:2.3:a:fork-cms:fork_cms:*:*:*:*:*:*:*:*
Range: <1.4.1
Spoon Library/Spoon Library
cpe:2.3:a:spoon-library:spoon_library:*:*:*:*:*:*:*:*
Range: <=2014-02-06
Spoon Library/Spoon Librarydescription
ghsa-coords
pkg:composer/spoon/library
Range: < 1.4.1

Patches

Vulnerability mechanics

References

5

github.com/forkcms/library/pull/69nvdPatchThird Party AdvisoryWEB
github.com/spoon/library/blob/bda89be80b7e1ffdc93d3180d33a56927430298b/spoon/cookie/cookie.phpnvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-2p2x-mw56-jc98ghsaADVISORY
github.com/forkcms/library/releases/tag/1.4.1nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2019-15521ghsaADVISORY

News mentions

0

No linked articles in our index yet.