Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-43360

Sunnet eHRD - Insecure Deserialization

Description

Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sunnet eHRD

  • 8affected
  • 9affected

References