This vulnerability in ThemeREX Dentario is caused by unsafe deserialization of untrusted data, enabling object injection attacks. It affects all versions up to 1.5. The CVSS 3.1 base score of 9.8 reflects that the vulnerability is remotely exploitable over the network without authentication or user interaction, and can result in complete system compromise. No patch or remediation information is currently provided, and no known exploits in the wild have been reported as of the publication date.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. Given the nature of object injection via deserialization, attackers may execute arbitrary code or manipulate application logic.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor ThemeREX communications for updates. No specific temporary mitigations are provided in the available data.