← All advisories

High severity8.8NVD Advisory· Published Jan 14, 2023· Updated Jun 17, 2026

CVE-2023-22850

CVE-2023-22850

Description

Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Tiki/Tiki3 versions
cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*range: <24.1
- (no CPE)
- (no CPE)range: <24.1

Patches

Vulnerability mechanics

References

2

karmainsecurity.com/KIS-2023-03nvdExploitThird Party Advisory
tiki.org/articlesnvdVendor Advisory

News mentions

0

No linked articles in our index yet.