CVE-2024-23759: Gambio

Critical severity, CVSS 9.8. EPSS: 47.5% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function.

Affected products

• Gambio Gambio: version 4.9.2.0 only

Published 2024-02-12. Last modified 2026-06-17.