Phar Deserialization Vulnerability via Logging Settings

The vulnerable code is located within the `concrete/controllers/single_page/dashboard/system/environment/logging.php` script. Specifically, into the `Logging::update_logging() ` method:

    public function update_logging()
    {
        $config = $this->app->make('config');
        $request = $this->request;

        if (!$this->token->validate('update_logging')) {
            return $this->showError($this->token->getErrorMessage());
        }

        // Load in variables from …