The vulnerability CVE-2024-52410 affects Phoenixheart Referrer Detector through deserialization of untrusted data, enabling object injection attacks. This issue impacts all versions up to and including 4.2.1.0. The vulnerability allows an attacker to remotely execute arbitrary code or manipulate application behavior without authentication or user interaction. The CVSS 3.1 base score is 9.8, reflecting critical impact on confidentiality, integrity, and availability. There is no vendor advisory or patch link provided, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including remote code execution and unauthorized data manipulation. The critical CVSS score (9.8) indicates that confidentiality, integrity, and availability are all severely impacted. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the vulnerable service and monitor for unusual activity related to deserialization processes. Avoid processing untrusted input where possible.