← CVE Intelligence

CVE-2024-5675

Unreliable data deserialization vulnerability in Mentor PUBLISHED

Description (CNA)

Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the “ViewState” field.

Affected (CNA)

Vendor / productVersions
Summar Software / Mentor – Employee Portalaffected 3.83.35

CWE

CWE-502

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.