CVE-2016-15044 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe deserialization of user-controlled data within the keditorservices module. An unauthenticated remote attacker can exploit this issue by sending a specially crafted serialized PHP object in the kdata GET parameter to the redirectWidgetCmd endpoint. Successful exploitation leads to execution of arbitrary PHP code in the context of the web server process.

Reserved 2025-07-22 | Published 2025-07-23 | Updated 2025-07-24 | Assigner VulnCheck

CRITICAL: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-502 Deserialization of Untrusted Data

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

Default status

unaffected

* before 11.1.0-2

affected

Credits

Security-Assessment.com finder

References

raw.githubusercontent.com/...http/kaltura_unserialize_rce.rb exploit

www.exploit-db.com/exploits/39563 exploit

www.exploit-db.com/exploits/40404 exploit

www.vulncheck.com/...sories/kaltura-php-object-injection-rce third-party-advisory

cve.org (CVE-2016-15044)

nvd.nist.gov (CVE-2016-15044)

Download JSON

https://cve.threatint.eu/CVE/CVE-2016-15044

Support options

Helpdesk Chat, Email, Knowledgebase