NA

CVE-2024-28213

Published: 07/03/2024 Updated: 07/03/2024

Vulnerability Summary

nGrinder prior to 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote malicious user to execute arbitrary code via unsafe Java objects deserialization.

Github Repositories

Here's a brief description of CVE-2024-28213: "CVE-2024-28213 is a critical vulnerability affecting versions prior to 3.5.9 of nGrinder. It allows unauthenticated users to send serialized Java objects to the application, potentially leading to the execution of arbitrary code through unsafe Java object deserialization.

CVE-2024-28213 Vulnerability Description nGrinder version prior to 359 is vulnerable to a critical security issue, CVE-2024-28213 This vulnerability allows unauthenticated users to send serialized Java objects to the application, potentially enabling a remote attacker to execute arbitrary code through unsafe Java object deserialization Vulnerability Details CVE ID: CVE-202