CVE-2021-32568: Deserialization of Untrusted Data in zmister2016/mrdoc
Published Sep 6, 2021
·Updated
mrdoc is vulnerable to Deserialization of Untrusted Data
Affected Software
1 affected component
mrdoc mrdoc<=0.7.0
Remediation
Event History
Sep 6, 2021
CVE Published
via MITRE·11:17 AM
Data Sourced
via MITRE·11:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-32568?
The severity of CVE-2021-32568 is classified as high due to the potential for remote code execution through deserialization of untrusted data.
2
How do I fix CVE-2021-32568?
To fix CVE-2021-32568, upgrade Mrdoc to version 0.8.0 or later where the vulnerability is addressed.
3
What software is affected by CVE-2021-32568?
CVE-2021-32568 affects the Mrdoc software versions up to and including 0.7.0.
4
What type of vulnerability is CVE-2021-32568?
CVE-2021-32568 is a vulnerability related to the deserialization of untrusted data.
5
Can CVE-2021-32568 be exploited remotely?
Yes, CVE-2021-32568 can be exploited remotely, allowing attackers to execute arbitrary code on the affected system.