CVE-2024-34274

2024-05-2120:15:08

[email protected]

web.nvd.nist.gov

openbd

deserialization

vulnerability

arbitrary code

untrusted data

cve-2024-34274

nvd

8.1 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclient_spot of the OpenBD software uses serialized data, which can be used to execute arbitrary code on the system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

github.com/OpenBD/openbd-core/issues/89