CVE-2024-28213

NAVER / nGrinder PUBLISHED

Description (CNA)

nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization.

Affected (CNA)

Vendor / product	Versions
NAVER / nGrinder	unaffected 3.5.9

CWE

CWE-502

References

https://cve.naver.com/detail/cve-2024-28213.html

ADP enrichment

CVE

No English description supplied.

https://cve.naver.com/detail/cve-2024-28213.html

CISA-ADP

No English description supplied.

No references supplied.