This vulnerability (CVE-2024-39636) affects CodeSolz Better Find and Replace versions up to 1.6.1 and is classified as CWE-502: Deserialization of Untrusted Data. It allows an attacker to send crafted serialized data that, when deserialized by the application, can lead to severe impacts including full system compromise. The CVSS 3.1 base score is 8.3, reflecting high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, no privileges required, and user interaction needed.

Successful exploitation can result in complete compromise of the affected system's confidentiality, integrity, and availability. This means an attacker could potentially execute arbitrary code, alter or delete data, and disrupt service availability. The vulnerability is exploitable remotely but requires user interaction and has high attack complexity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when processing serialized data from untrusted sources and consider disabling or restricting the functionality that handles deserialization if possible.