CVE-2024-12687

Name of the Vulnerable Software and Affected Versions PlexTrac versions 1.61.3 through 2.8.1

Description The issue is related to the deserialization of untrusted data in PlexTrac's Runbooks modules, allowing object injection and arbitrary file writes.

Recommendations For versions 1.61.3 through 2.8.1, update to a version that contains a fix for this issue. As a temporary workaround, consider disabling the deserialization of untrusted data in the Runbooks modules until a patch is available. Restrict access to the Runbooks modules to minimize the risk of exploitation.