Description
Untrusted data deserialization vulnerability has been found in Mentor - Employee Portal, affecting version 3.83.35. This vulnerability could allow an attacker to execute arbitrary code, by injecting a malicious payload into the “ViewState” field.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Summar Software | Mentor – Employee Portal | 3.83.35 | — |