CVE-2024-34274

OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data

Low · published May 21, 2024

CVSS v3.1
3.9
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclient_spot of the OpenBD software uses serialized data, which can be used to execute arbitrary code on the system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Published
2024-05-21T19:36Z
EPSS history
Timeline
  • 21 MAY 19:36Z
    OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data
    cvelistv5