CVE-2024-6441 ORIPA LoaderXML.java deserialization
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2024-6441?
CVE-2024-6441 is a medium-severity vulnerability in ORIPA, published on 2 Jul 2024.
Official description
A vulnerability was found in ORIPA up to 1.72. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/oripa/persistence/doc/loader/LoaderXML.java. The manipulation leads to deserialization. The attack can be launched remotely. Upgrading to version 1.80 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-270169 was assigned to this vulnerability.
Weakness: CWE-502
Which versions are affected by CVE-2024-6441?
How do I fix CVE-2024-6441?
No fix has been published for CVE-2024-6441 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-6441 being exploited?
There is no known exploitation of CVE-2024-6441 in the wild and no public exploit code.
Sources
Also known as GHSA-j724-5cxg-pq82.