PT-2025-39001

CVE-2025-53465

·

Published

2025-09-22

·

Updated

2025-09-22

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions raoinfotech GSheets Connector versions through 1.1.1
Description A flaw exists in raoinfotech GSheets Connector that allows for Object Injection due to deserialization of untrusted data. This issue impacts the application's ability to securely handle incoming data, potentially leading to unauthorized access or control. The vulnerability is related to the deserialization process, where untrusted data is converted into an object, potentially allowing an attacker to manipulate the application's state.
Recommendations Update raoinfotech GSheets Connector to a version later than 1.1.1.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾