CVE-2024-56283
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Jan 7, 2025
CWE ID 502
Summary
CVE-2024-56283 is a Deserialization of Untrusted Data vulnerability affecting the Locatoraid Store Locator application from versions n/a through 3.9.50. The issue permits Object Injection, allowing an attacker to execute arbitrary code and potentially gain unauthorized access to sensitive data. This vulnerability poses a significant risk to the confidentiality, integrity, and availability of affected systems. Users are strongly encouraged to apply the necessary patches or upgrades to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.