Description (CNA)
In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load arbitrary third-party modules, leading to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Yettiesoft / VestCert | affected 2.3.6 through 2.5.29 |
CWE
CWE-829
References
ADP enrichment
No English description supplied.