nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://cve.naver.com/detail/cve-2024-28213.html |
Configurations
No configuration.
History
07 Mar 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-502 |
07 Mar 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-07 05:15
Updated : 2024-03-07 13:52
NVD link : CVE-2024-28213
Mitre link : CVE-2024-28213
CVE.ORG link : CVE-2024-28213
JSON object : View
Products Affected
No product.
CWE
CWE-502
Deserialization of Untrusted Data