CVE-2024-34274

Published May 21st, 2024

View on NVD ↗

CVSS v3

3.9

LOW

CVSS v2

N/A

Affected

PROJECT

Description

OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclient_spot of the OpenBD software uses serialized data, which can be used to execute arbitrary code on the system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

OpenBD/openbd-core

The original open source Java powered GPL CFML runtime engine

GitHub