This vulnerability in NooTheme Jobica Core (<= 1.4.1) arises from unsafe deserialization of untrusted data, enabling attackers to perform object injection attacks. Such attacks can result in remote code execution or other severe impacts. The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, requiring low privileges but no user interaction, and resulting in high impact on confidentiality, integrity, and availability.

Successful exploitation allows attackers to inject malicious objects during deserialization, potentially leading to full system compromise including unauthorized data access, modification, and service disruption. The high CVSS score indicates critical impact on affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting deserialization functionality if possible and monitor for updates from NooTheme. No official fix or temporary mitigation has been documented at this time.