CVE-2024-9005CWE-502

CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is…

High · published October 8, 2024

CVSS v4.0
7.3
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be

remotely executed on the server when unsafely deserialized data is posted to the web server.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-10-08T10:22Z
EPSS history
Timeline
  • 08 OCT 10:22Z
    CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is…
    cvelistv5