Threats tagged 'ghsa-v4j4-5mx7-gp87'

A critical deserialization of untrusted data vulnerability (CWE-502) exists in Barn2 Plugins Document Library Pro prior to version 4.2.2. This flaw allows object injection, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high severity. No patch or fixed version is explicitly provided in the data, but the issue affects versions before 4.2.2.