Tylertech · Tylertech Eagle · CVE-2019-16112
**Name of the Vulnerable Software and Affected Versions**
TylerTech Eagle version 2018.3.11
**Description**
The issue allows remote code execution via a crafted Java object to the "recorder/ServiceManager?service=tyler.empire.settings.SettingManager" URI, resulting from the deserialization of untrusted user input.
**Recommendations**
For TylerTech Eagle version 2018.3.11, as a temporary workaround, consider restricting access to the "recorder/ServiceManager?service=tyler.empire.settings.SettingManager" URI until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.