CVE-2024-28213

nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization...

CVE-2024-28213

nGrinder versions prior to 3.5.9 are vulnerable to Insecure Deserialization (CWE-502). The flaw exists because the application fails to implement proper input filtering when deserializing Java objects within Connector.java . This allows unauthenticated remote attackers to submit serialized Java o...