CVE-2024-52439

Deserialization of Untrusted Data vulnerability in Mark O'Donnell Team Rosters team-rosters allows Object Injection.This issue affects Team Rosters: from n/a through = 4.8.2...

CVE-2024-52439

CVE-2024-52439 describes a deserialization of untrusted data vulnerability in the WordPress plugin Team Rosters (versions up to 4.6). The root cause is a PHP Object Injection flaw arising from deserializing untrusted data, which could allow an attacker to inject objects. The connected documents c...

WordPress Team Rosters Plugin <= 4.6 is vulnerable to PHP Object Injection

Software Team Rosters Type Plugin Vulnerable versions = 4.6 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52439 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 946aef8ce4ba Credits Mika Required privilege Unauthenticated Publish...