CVE-2024-23759
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
55Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.8epss 48%
from disclosure to weaponsame day
Published on NVDFeb 12
metasploitJan 19
Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a