Remote Code Execution vulnerability in OpenVox Server resulting from unsafe deserialization of Ruby objects in agent reports. When processing Puppet/OpenVox reports containing serialized Ruby objects from custom resource types, malicious event objects can be constructed to execute arbitrary code on the server during deserialization.
| Vendor | Product | Versions |
|---|---|---|
| openvox project | openvox | < 9.2.0, 8.x < 8.18.0 |
Loading…
