Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-28211 EUVD-2024-25330GHSA-77v6-9wph-jrmj

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RM…

Published Mar 7, 2024 · Updated Aug 5, 2024 · Assigned by naver

Description

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker.

Affected products

VendorProductAffectedFixed
NAVER nGrinder — 3.5.9

References