AquilaCMS Deserialization Vulnerability in Categories API Endpoint

A critical deserialization vulnerability has been identified in AquilaCMS version 1.412.13. The issue arises in the file '/api/v2/categories', where the 'PostBody.populate' argument can be manipulated, leading to unauthorized data deserialization. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for deserialization of data, which could potentially be used to execute arbitrary code or manipulate application logic, depending on the deserialized data and the application's handling of it.