← All advisories

High severity8.8NVD Advisory· Published Jan 14, 2023· Updated Jun 17, 2026

CVE-2023-22853

CVE-2023-22853

Description

Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP Object Injection because of an eval.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Tiki/Tiki3 versions
cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*range: <24.1
- (no CPE)
- (no CPE)range: <24.1

Patches

Vulnerability mechanics

References

2

karmainsecurity.com/KIS-2023-02nvdThird Party Advisory
tiki.org/articlesnvdVendor Advisory

News mentions

0

No linked articles in our index yet.