CVE-2024-9005

Published Oct 8, 2024

Last updated 5 months ago

Overview

Description: CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server.
Source: cybersecurity@se.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.1
Impact score: 5.9
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

cybersecurity@se.com: CWE-502

Hype score: Not currently trending

References