Skip to content
OpenAdvisories

Package · Maven

org.ngrinder:ngrinder-core

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    nGrinder vulnerable to unsafe Java objects deserialization

    nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization.