nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://cve.naver.com/detail/cve-2024-28211.html |
Configurations
No configuration.
History
07 Mar 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-502 |
07 Mar 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-07 05:15
Updated : 2024-03-07 13:52
NVD link : CVE-2024-28211
Mitre link : CVE-2024-28211
CVE.ORG link : CVE-2024-28211
JSON object : View
Products Affected
No product.
CWE
CWE-502
Deserialization of Untrusted Data