PT-2025-39001
CVE-2025-53465
·
Published
2025-09-22
·
Updated
2025-09-22
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
raoinfotech GSheets Connector versions through 1.1.1
Description
A flaw exists in raoinfotech GSheets Connector that allows for Object Injection due to deserialization of untrusted data. This issue impacts the application's ability to securely handle incoming data, potentially leading to unauthorized access or control. The vulnerability is related to the deserialization process, where untrusted data is converted into an object, potentially allowing an attacker to manipulate the application's state.
Recommendations
Update raoinfotech GSheets Connector to a version later than 1.1.1.
Found an issue in the description? Have something to add? Feel free to write us 👾