PT-2024-33363 · Innovaweb Sp. Z O.O. · Foter

Lvt-Tholv2K

·

CVE-2024-49227

·

Published

2024-10-16

·

Updated

2024-10-16

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Innovaweb Sp. Z o.O. Free Stock Photos Foter versions 1.5.4 and earlier
Description The issue is related to Deserialization of Untrusted Data, which leads to Object Injection. This allows for potential exploitation.
Recommendations For versions 1.5.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-49227

Affected Products

Foter