CVE-2024-28215

Mô tả

Tham khảo

• cve.naver.com/detail/cve-2024-28215.html · Vendor Advisory

Lỗ hổng khác của ngrinder

• CVE-2024-28216TRUNG BÌNH 5.4nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause o…
• CVE-2024-28214THẤP 2.7nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker.
• CVE-2024-28213NGHIÊM TRỌNG 9.8nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbi…
• CVE-2024-28212NGHIÊM TRỌNG 9.8nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.
• CVE-2024-28211NGHIÊM TRỌNG 9.8nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI…