This vulnerability affects lenve vhr 1.0-SNAPSHOT and involves an insecure deserialization issue within the MailReceiver component. Remote attackers can manipulate input to trigger deserialization, potentially leading to unauthorized actions. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. The vendor was contacted but has not responded, and no official patch or remediation guidance is available. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation could allow remote attackers to manipulate deserialization in the MailReceiver component, potentially leading to unauthorized code execution or other impacts related to deserialization flaws. The medium CVSS score reflects limited privileges required and low complexity, but the exact impact details are not specified.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider mitigating exposure by restricting access to the vulnerable component and monitoring for exploitation attempts.