This vulnerability in GMRobbins Disc Golf Manager involves unsafe deserialization of untrusted data, enabling an attacker to perform object injection attacks. This can allow remote attackers to execute arbitrary code or cause denial of service, affecting all versions up to and including 1.0.0. The vulnerability is remotely exploitable without authentication or user interaction, leading to high impact on confidentiality, integrity, and availability.

Successful exploitation can result in full system compromise, including arbitrary code execution, data tampering, and service disruption. The vulnerability affects all users running vulnerable versions of Disc Golf Manager, potentially exposing sensitive data and critical application functionality to attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the application and monitoring for suspicious activity related to object deserialization. Avoid processing untrusted serialized data if possible.