PT-2025-21231 · Medidok · Medidok

CVE-2025-32363

Published

2025-05-14

Updated

2025-05-17

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: mediDOK versions prior to 2.5.18.43

Description: The issue allows remote attackers to achieve remote code execution on a target system via deserialization of untrusted data.

Recommendations: For versions prior to 2.5.18.43, update to version 2.5.18.43 or later to resolve the issue.

Fix

RCE

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2025-32363

Medidok