Unauthenticated PHP Object Injection in Mission <= 1.22 versions.

What to know

What it is

The Mission application has a critical vulnerability (CVSS 9.8) due to unauthenticated PHP Object Injection, which allows an attacker to potentially gain high privileges, read, modify or delete data, and execute code. An attacker could exploit this vulnerability without authentication.

Affected

{'products': ['Mission'], 'packages': [], 'versions': ['<= 1.22']}

Fix

Check the linked advisory for a fix; upgrade to a version greater than 1.22

Exploitation

No known exploitation