CVE-2024-28212

nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization...

CVE-2024-28212

The stress testing platform nGrinder is vulnerable to remote code execution (RCE) in versions prior to 3.5.9 . The root cause is the use of an outdated version of SnakeYAML , which allows for unsafe deserialization of untrusted data (CWE-502). An attacker could potentially execute arbitrary code ...