CVE-2023-46990

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function...

CVE-2023-46990

Summary: CVE-2023-46990 affects PublicCMS (v4.0.202302.e) via deserialization of untrusted data in the writeReplace function, enabling remote code execution. The vulnerability is tied to the deserialization path and occurs in a Java-based PublicCMS release. Impact: Remote attacker could run arbit...

CVE-2023-46990

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function...