PT-2024-17714
CVE-2024-12687
·
تاريخ النشر
2024-12-16
·
تاريخ التحديث
2025-10-10
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PlexTrac versions 1.61.3 through 2.8.1
Description
The issue is related to the deserialization of untrusted data in PlexTrac's Runbooks modules, allowing object injection and arbitrary file writes.
Recommendations
For versions 1.61.3 through 2.8.1, update to a version that contains a fix for this issue.
As a temporary workaround, consider disabling the deserialization of untrusted data in the Runbooks modules until a patch is available.
Restrict access to the Runbooks modules to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾