The Ministry of Justice General Directorate of Information Technology's UYAP Document Editor is vulnerable to insecure deserialization, potentially allowing remote code execution. This issue affects UYAP Document Editor versions before 5.4.20. The vulnerability is caused by the deserialization of untrusted data, which could allow for object injection. Defenders should assess exposure and prioritize update [truncated]
HIGHMinistry of Justice General Directorate of Information TechnologyCVE published 2026-10-12
The Ministry of Justice General Directorate of Information Technology's UYAP Document Editor is vulnerable to OS command injection due to improper neutralization of special elements used in OS commands. This issue affects UYAP Document Editor versions before 5.4.20. The vulnerability could allow for potential unauthorized command execution, leading to system compromise or data breaches. Defenders should a [truncated]
