Threats tagged 'ghsa-8jp6-hw6c-mjgf'

A critical deserialization of untrusted data vulnerability exists in Next4Biz Information Technologies Inc.'s Customer Service Management (CSM) product, allowing code injection. The vulnerability affects versions through 07092026. The vendor has not responded to disclosure attempts. The CVSS score is 9.8, indicating a critical severity with network attack vector, no privileges required, and impacts confidentiality, integrity, and availability.