{"vulnerability": "cve-2023-22850", "sightings": [{"uuid": "717327c0-dbc8-4fbb-a9ca-380ba65f5982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22850", "type": "seen", "source": "https://t.me/hacking_Attack/84449", "content": "Exploit Collector\nTiki Wiki CMS Groupware 24.0 grid.php PHP Object Injection\n\nhttps://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png \nTiki Wiki CMS Groupware versions 24.0 and below suffers from a PHP object injection vulnerability in grid.php.\n\nSHA-256 | 2ec6d4c5f2c778a5cba091671d5430e465c12ac9843c5cd81c7a60ef025d78c5\n\nDownload\n-----------------------------------------------------------------------------\nTiki Wiki CMS Groupware <=\nVulnerability\n-----------------------------------------------------------------------------\n[-] Software Link:\n\nhttps://tiki.org\n[-] Affected Versions:\n\nVersion 24.0 and prior versions.\n[-] Vulnerability Description:\n\nThe vulnerability is located in the /lib/sheet/grid.php script, \nspecifically into the TikiSheetSerializeHandler::_load() method, which \nis using the unserialize() PHP function with user-controlled input. This \ncan be exploited by malicious users to inject arbitrary PHP objects into \nthe application scope, allowing them to perform a variety of attacks, \nsuch as executing arbitrary PHP code. Successful exploitation of this \nvulnerability requires the \u201cSpreadsheets\u201d feature to be enabled and an \naccount with permissions to create a new sheet. However, due to the CSRF \nvulnerability described in KIS-2023-01, this vulnerability might also be \nexploited by tricking a victim user into opening a web page like the \nfollowing:\nmethod=\"POST\" enctype=\"multipart/form-data\">\n\n/>\n[-] Solution:\n\nUpgrade to version 24.1 or later.\n[-] Disclosure Timeline:\n\n[07/03/2022] - Vendor notified\n[23/08/2022] - Version 24.1 released\n[09/01/2023] - Public disclosure\n[-] CVE Reference:\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org)\nhas assigned the name CVE-2023-22850 to this vulnerability.\n[-] Credits:\n\nVulnerability discovered by Egidio Romano.\n[-] Original Advisory:\n\nhttp://karmainsecurity.com/KIS-2023-03\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:11.625763Z"}, {"uuid": "275e5cad-fbf5-435c-b2d9-386f922ee396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22850", "type": "seen", "source": "https://t.me/hacking_Attack/84449", "content": "Exploit Collector\nTiki Wiki CMS Groupware 24.0 grid.php PHP Object Injection\n\nhttps://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png \nTiki Wiki CMS Groupware versions 24.0 and below suffers from a PHP object injection vulnerability in grid.php.\n\nSHA-256 | 2ec6d4c5f2c778a5cba091671d5430e465c12ac9843c5cd81c7a60ef025d78c5\n\nDownload\n-----------------------------------------------------------------------------\nTiki Wiki CMS Groupware <=\nVulnerability\n-----------------------------------------------------------------------------\n[-] Software Link:\n\nhttps://tiki.org\n[-] Affected Versions:\n\nVersion 24.0 and prior versions.\n[-] Vulnerability Description:\n\nThe vulnerability is located in the /lib/sheet/grid.php script, \nspecifically into the TikiSheetSerializeHandler::_load() method, which \nis using the unserialize() PHP function with user-controlled input. This \ncan be exploited by malicious users to inject arbitrary PHP objects into \nthe application scope, allowing them to perform a variety of attacks, \nsuch as executing arbitrary PHP code. Successful exploitation of this \nvulnerability requires the \u201cSpreadsheets\u201d feature to be enabled and an \naccount with permissions to create a new sheet. However, due to the CSRF \nvulnerability described in KIS-2023-01, this vulnerability might also be \nexploited by tricking a victim user into opening a web page like the \nfollowing:\nmethod=\"POST\" enctype=\"multipart/form-data\">\n\n/>\n[-] Solution:\n\nUpgrade to version 24.1 or later.\n[-] Disclosure Timeline:\n\n[07/03/2022] - Vendor notified\n[23/08/2022] - Version 24.1 released\n[09/01/2023] - Public disclosure\n[-] CVE Reference:\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org)\nhas assigned the name CVE-2023-22850 to this vulnerability.\n[-] Credits:\n\nVulnerability discovered by Egidio Romano.\n[-] Original Advisory:\n\nhttp://karmainsecurity.com/KIS-2023-03\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:28.144227Z"}]}