CVE-2024-28213: Critical severity ngrinder vulnerability
Published Mar 7, 2024
·Updated
nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization.
Affected Software
2 affected componentsFixes available
maven/org.ngrinder:ngrinder-core<3.5.9
3.5.9
NAVER Ngrinder<3.5.9
Event History
Mar 7, 2024
CVE Published
via MITRE·04:49 AM
Data Sourced
via MITRE·04:49 AM
DescriptionWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·06:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-28213?
CVE-2024-28213 has a high severity level due to its potential for remote code execution through unsafe Java object deserialization.
2
How do I fix CVE-2024-28213?
To fix CVE-2024-28213, you should upgrade nGrinder to version 3.5.9 or later.
3
Who is affected by CVE-2024-28213?
CVE-2024-28213 affects all versions of nGrinder prior to 3.5.9.
4
What type of vulnerability is CVE-2024-28213?
CVE-2024-28213 is a deserialization vulnerability that allows arbitrary code execution.
5
Can CVE-2024-28213 be exploited remotely?
Yes, CVE-2024-28213 can be exploited by remote attackers since it allows unauthenticated access.