The vulnerability CVE-2025-49331 affects impleCode eCommerce Product Catalog versions up to 3.4.3 and involves deserialization of untrusted data, which allows an attacker to perform object injection. This can lead to remote code execution or other malicious actions impacting confidentiality, integrity, and availability. The CVSS v3.1 score is 7.2, indicating a high severity with network attack vector, low attack complexity, high privileges required, no user interaction, and unchanged scope.

Successful exploitation of this vulnerability can result in full compromise of the affected system's confidentiality, integrity, and availability. Given the high CVSS score and the nature of object injection via deserialization, attackers with high privileges could execute arbitrary code or manipulate system behavior.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the affected application to trusted users with high privileges and monitor for suspicious activity related to deserialization processes.