CVE-2023-29492 — Novi Survey Insecure Deserialization Vulnerability

CISA KEVExploited: confirmedNovi Survey

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.

Vulnerability details

Affected productsNovi Survey
KEV remediation due2023-05-04