mediDOK Remote Code Execution Vulnerability via Untrusted Data Deserialization

A remote code execution vulnerability exists in mediDOK versions prior to 2.5.18.43. This issue arises from the deserialization of untrusted data, allowing remote attackers to execute arbitrary code on the target system.

Impact

Exploitation of this vulnerability allows for authenticated remote code execution on the server where mediDOK is installed.

Remediation

Users are advised to update to mediDOK version 2.5.18.43, which addresses this vulnerability. Instructions for updating can be found on the mediDOK website.