← Back to browse · API

CVE-2024-23759

Severity
CRITICAL
CVSS
9.8
EPSS
0.47829
Risk score
55.94
CISA KEV
No
PoC
No
Published
2024-02-12
Modified
2025-05-07
First seen
2026-08-07
Aliases
EUVD-2024-21212, GHSA-F9XC-7R8V-HF32
Products
n/a:n/a, n/a:n/a n/a
Sources
euvd EUVD-2024-21212

Description

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function.

References