CVE-2024-56291

Name of the Vulnerable Software and Affected Versions PlainInventory versions 3.1.6 and earlier

Description The issue is related to the deserialization of untrusted data, which allows object injection. This can be exploited due to the vulnerability in handling data deserialization.

Recommendations For versions 3.1.6 and earlier, update to a version later than 3.1.6 to resolve the issue. As a temporary workaround, consider restricting the deserialization of untrusted data to minimize the risk of object injection.