CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:naver:ngrinder:*:*:*:*:*:*:*:*

History

07 May 2025, 15:29

Type Values Removed Values Added
References () https://cve.naver.com/detail/cve-2024-28211.html - () https://cve.naver.com/detail/cve-2024-28211.html - Vendor Advisory
CPE cpe:2.3:a:naver:ngrinder:*:*:*:*:*:*:*:*
CWE CWE-502
First Time Naver
Naver ngrinder

07 Mar 2024, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-07 05:15

Updated : 2025-05-07 15:29


NVD link : CVE-2024-28211

Mitre link : CVE-2024-28211


JSON object : View

Products Affected

naver

  • ngrinder
CWE
CWE-502

Deserialization of Untrusted Data