Deserialization of Untrusted Data Vulnerability Allows Object Injection in Namaste! LMS

CVE-2024-50408

What is CVE-2024-50408?

A deserialization vulnerability exists in Namaste! LMS developed by Kiboko Labs, which permits object injection due to untrusted data handling. This issue can lead to potential exploitation by attackers who can manipulate the deserialization process, thereby compromising the integrity and security of the application. The affected versions include all variants up to 2.6.3, prompting users to prioritize updates and security measures to mitigate associated risks.

References