Description
nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NAVER | nGrinder | — | 3.5.9 |
Critical · 9.8
CVE-2024-28212
EUVD-2024-25331GHSA-mh9m-7c86-2wxj
nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.
Published Mar 7, 2024 · Updated Aug 12, 2024 · Assigned by naver