Lucene search
GoogleOSV:GHSA-J7JM-8GF5-FRCMHistoryMar 07, 2024 - 6:30 a.m.
nGrinder vulnerable to unsafe Java objects deserialization
2024-03-0706:30:31
Google
osv.dev
5
ngrinder
vulnerability
java deserialization
remote code execution
nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization.
Related
cvelist
cvelist
CVE-2024-28213
2024-03-07 04:49:47
github
github
nGrinder vulnerable to unsafe Java objects deserialization
2024-03-07 06:30:31
cve
cve
CVE-2024-28213
2024-03-07 05:15:54
nvd
nvd
CVE-2024-28213
2024-03-07 05:15:54
prion
prion
Deserialization of untrusted data
2024-03-07 05:15:00