CVE-2024-28213

Summary

nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization.

Affected Software

Weaknesses

• CWE-502: CWE-502 Deserialization of Untrusted Data

ADP Enrichment

CVE Program Container

Additional References

• https://cve.naver.com/detail/cve-2024-28213.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://cve.naver.com/detail/cve-2024-28213.html

• ←Previous
• Next→