Deserialization of Untrusted Data Vulnerability Affects Master Slider

CVE-2024-32600

What is CVE-2024-32600?

A vulnerability exists in Averta Master Slider due to improper handling of untrusted data during the deserialization process. This flaw can lead to PHP object injection, which may allow attackers to exploit the web application by manipulating PHP objects. Users of Master Slider versions from n/a up to and including 3.9.5 are particularly affected. It is advisable for users to implement necessary security updates and patches to safeguard their applications against potential exploitation stemming from this vulnerability.

References