This vulnerability in uxper Nuss arises from unsafe deserialization of untrusted data, enabling an attacker with low privileges and no user interaction to perform object injection attacks. The affected versions include all releases up to 1.3.3. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. There is no indication of known exploits in the wild or available patches at this time.

Successful exploitation allows an attacker to inject malicious objects via deserialization, potentially leading to full compromise of the system's confidentiality, integrity, and availability. Given the high CVSS score and impact metrics, this vulnerability poses a significant risk to affected deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the vulnerable service and monitoring for suspicious activity related to deserialization processes.