CVE-2024-34274

2024-05-2120:15:08

[email protected]

web.nvd.nist.gov

openbd software

vulnerable

deserialization

untrusted data

serialized data

arbitrary code

unsupported products

maintainer

7.4 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclient_spot of the OpenBD software uses serialized data, which can be used to execute arbitrary code on the system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

github.com/OpenBD/openbd-core/issues/89