Description
In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load arbitrary third-party modules, leading to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yettiesoft | VestCert | 2.3.6 – ≤ 2.5.29 | — |