CVE-2024-49625

Name of the Vulnerable Software and Affected Versions Brandon Clark SiteBuilder Dynamic Components versions n/a through 1.0

Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Brandon Clark SiteBuilder Dynamic Components.

Recommendations For versions n/a through 1.0, consider disabling the deserialization of untrusted data as a temporary workaround until a patch is available. Restrict access to components that use deserialization to minimize the risk of exploitation. Avoid using untrusted data in the deserialization process until the issue is resolved.