This vulnerability in designthemes Insurance (up to version 3.5) arises from unsafe deserialization of untrusted data, enabling object injection attacks. The CVSS 3.1 base score is 8.8, indicating high impact with network attack vector, low attack complexity, requiring low privileges and no user interaction. Successful exploitation can result in complete compromise of confidentiality, integrity, and availability of the system. No patch or official remediation details are provided in the available data.

Exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. Attackers may inject malicious objects through deserialization, potentially executing arbitrary code or causing denial of service. The vulnerability is remotely exploitable with low complexity and minimal privileges required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users only and monitor for suspicious activity related to deserialization processes. Avoid processing untrusted serialized data where possible.