CVE-2021-27852

Checkbox Survey Deserialization of Untrusted Data Vulnerability

Details

CISA date: 2022-04-11
Affected versions: Checkbox Survey
Summary: Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code.
Remediation: Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.
Exploit info: No exploit-tagged NVD references in our cache; see the CISA KEV link below.

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.