CVE-2024-28211
Assigner: naver
Published: 2024-03-07T04:49:21.951Z
State: PUBLISHED
problemTypes: descriptions: cweId: CWE-502
description: CWE-502 Deserialization of Untrusted Data
type: CWE
affected: vendor: NAVER
product: nGrinder
versions: status: unaffected
version: 3.5.9
defaultStatus: affected
descriptions: value: nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker.
credits: value: Peter Stöckli of GitHub Security Lab
source: discovery: EXTERNAL