CVE-2024-6441

Summary

CVE-2024-6441 is a newly disclosed critical vulnerability affecting ORIPA versions up to 1.72. The issue lies in an unidentified functionality of the file LoaderXML.java located in src/main/java/oripa/persistence/doc/loader. An attacker can exploit this vulnerability through remote deserialization manipulation. To mitigate this risk, it is recommended to upgrade to ORIPA version 1.80. The vulnerability has been assigned the identifier VDB-270169.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.