Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-5675

Unreliable data deserialization vulnerability in Mentor

Description

Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the “ViewState” field.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Summar Software Mentor – Employee Portal

Default version status: unaffected

  • 3.83.35affected

References