CVE-2018-11569: Eventum Project Eventum

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.

Affected products

• Eventum Project Eventum: from 3.5.0, before 3.5.2 (fixed in 3.5.2)

Published 2019-09-05. Last modified 2026-06-17.