CVE-2024-52445
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 20, 2024
Updated: Nov 21, 2024
CWE ID 502
Summary
CVE-2024-52445 is a Deserialization of Untrusted Data vulnerability impacting the QRMenu Restaurant QR Menu Lite application. This issue permits Object Injection, posing a significant risk. The affected versions of the software range from n/a to 1.0.3. Attackers can exploit this vulnerability by sending malicious data to be deserialized, potentially leading to code execution and unauthorized access. Users are advised to update their QRMenu Restaurant QR Menu Lite software as soon as a patch is available to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share