Description (CNA)
Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PMB Services / PMB | affected 7.5.1 before 7.5.6-2; affected 7.4.1 before 7.4.9; affected 7.3.1 before 7.3.18 |
CWE
CWE-502
References
- https://github.com/enisaeu/CNW/blob/main/advisories/2024/CNW-2024-A-12.md
- https://forge.sigb.net/projects/pmb/files
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.