This vulnerability in enituretechnology LTL Freight Quotes – Daylight Edition (up to version 2.2.7) is caused by deserialization of untrusted data, which enables object injection attacks. The CVSS 3.1 score of 7.2 indicates a high impact with network attack vector, low attack complexity, requiring high privileges but no user interaction. Successful exploitation could lead to full compromise of confidentiality, integrity, and availability of the affected application. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows an attacker with high privileges to perform object injection via deserialization of untrusted data, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. This could result in unauthorized data access, data manipulation, or service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application to trusted users only and monitor for suspicious activity related to deserialization processes. Avoid processing untrusted serialized data where possible.