← Volver a CVEs
CVE-2024-28212
CRITICAL9.8
Descripcion
nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.
Detalles CVE
Puntuacion CVSS v3.19.8
SeveridadCRITICAL
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado3/7/2024
Ultima modificacion5/7/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
naver:ngrinder
Debilidades (CWE)
CWE-502CWE-502
Referencias
https://cve.naver.com/detail/cve-2024-28212.html(cve@navercorp.com)
https://cve.naver.com/detail/cve-2024-28212.html(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.