Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.
{ "versions": [ { "introduced": "3.5.0" }, { "fixed": "3.5.2" } ] }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11569.json"