critical9.8
CVE-2024-28212
nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.
Impact
nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Naver | Ngrinder | before 3.5.9 |