CVE-2024-47636

Summary

CVE-2024-47636 is a Deserialization of Untrusted Data vulnerability that impacts the Eyecix JobSearch application, from an undisclosed version up to and including 2.5.9. This issue enables Object Injection, putting systems at risk of unauthorized access or manipulation. Attackers can exploit this vulnerability by sending malicious data to the application, resulting in the deserialization of untrusted objects and the potential execution of arbitrary code. Organizations using the Eyecix JobSearch application are strongly advised to apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.