Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.Referenceshttps://github.com/eventum/eventum/releases/tag/v3.5.2