critical10.0
CVE-2024-5675
Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35.
Impact
Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the “ViewState” field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Summar | Mentor | Version 3.83.35 |