{"id":"CVE-2024-6441","summary":"ORIPA LoaderXML.java deserialization","details":"A vulnerability was found in ORIPA up to 1.72. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/oripa/persistence/doc/loader/LoaderXML.java. The manipulation leads to deserialization. The attack can be launched remotely. Upgrading to version 1.80 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-270169 was assigned to this vulnerability.","modified":"2026-07-15T01:49:13.089820943Z","published":"2024-07-02T11:31:04.637Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-502"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6441.json","unresolved_ranges":[{"extracted_events":[{"introduced":"1.2"},{"last_affected":"1.2"},{"introduced":"1.3"},{"last_affected":"1.3"},{"introduced":"1.4"},{"last_affected":"1.4"},{"introduced":"1.5"},{"last_affected":"1.5"},{"introduced":"1.6"},{"last_affected":"1.6"},{"introduced":"1.7"},{"last_affected":"1.7"},{"introduced":"1.8"},{"last_affected":"1.8"},{"introduced":"1.9"},{"last_affected":"1.9"},{"introduced":"1.11"},{"last_affected":"1.11"},{"introduced":"1.12"},{"last_affected":"1.12"},{"introduced":"1.13"},{"last_affected":"1.13"},{"introduced":"1.14"},{"last_affected":"1.14"},{"introduced":"1.15"},{"last_affected":"1.15"},{"introduced":"1.16"},{"last_affected":"1.16"},{"introduced":"1.17"},{"last_affected":"1.17"},{"introduced":"1.18"},{"last_affected":"1.18"},{"introduced":"1.19"},{"last_affected":"1.19"},{"introduced":"1.21"},{"last_affected":"1.21"},{"introduced":"1.22"},{"last_affected":"1.22"},{"introduced":"1.23"},{"last_affected":"1.23"},{"introduced":"1.24"},{"last_affected":"1.24"},{"introduced":"1.26"},{"last_affected":"1.26"},{"introduced":"1.27"},{"last_affected":"1.27"},{"introduced":"1.28"},{"last_affected":"1.28"},{"introduced":"1.29"},{"last_affected":"1.29"},{"introduced":"1.32"},{"last_affected":"1.32"},{"introduced":"1.33"},{"last_affected":"1.33"},{"introduced":"1.34"},{"last_affected":"1.34"},{"introduced":"1.36"},{"last_affected":"1.36"},{"introduced":"1.37"},{"last_affected":"1.37"},{"introduced":"1.38"},{"last_affected":"1.38"},{"introduced":"1.39"},{"last_affected":"1.39"},{"introduced":"1.41"},{"last_affected":"1.41"},{"introduced":"1.42"},{"last_affected":"1.42"},{"introduced":"1.43"},{"last_affected":"1.43"},{"introduced":"1.44"},{"last_affected":"1.44"},{"introduced":"1.46"},{"last_affected":"1.46"},{"introduced":"1.47"},{"last_affected":"1.47"},{"introduced":"1.48"},{"last_affected":"1.48"},{"introduced":"1.49"},{"last_affected":"1.49"},{"introduced":"1.51"},{"last_affected":"1.51"},{"introduced":"1.56"},{"last_affected":"1.56"},{"introduced":"1.57"},{"last_affected":"1.57"},{"introduced":"1.58"},{"last_affected":"1.58"},{"introduced":"1.59"},{"last_affected":"1.59"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6441.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6441"},{"type":"ADVISORY","url":"https://vuldb.com/?id.270169"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.367350"},{"type":"REPORT","url":"https://github.com/oripa/oripa/issues/355"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.270169"},{"type":"FIX","url":"https://github.com/oripa/oripa/milestone/15"},{"type":"FIX","url":"https://github.com/oripa/oripa/pull/356/commits/1abf8eb9b6b173d86d277426db1a551d6490c94a"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/oripa/oripa","events":[{"introduced":"0a06188301f2318185de2ef8ac6b029cdaf757c2"},{"last_affected":"ac2709943d5d1b61595e80cfbf4a67483e49cbb4"}],"database_specific":{"extracted_events":[{"introduced":"1.0"},{"last_affected":"1.0"},{"introduced":"1.1"},{"last_affected":"1.1"},{"introduced":"1.10"},{"last_affected":"1.10"},{"introduced":"1.20"},{"last_affected":"1.20"},{"introduced":"1.25"},{"last_affected":"1.25"},{"introduced":"1.30"},{"last_affected":"1.30"},{"introduced":"1.31"},{"last_affected":"1.31"},{"introduced":"1.35"},{"last_affected":"1.35"},{"introduced":"1.40"},{"last_affected":"1.40"},{"introduced":"1.45"},{"last_affected":"1.45"},{"introduced":"1.50"},{"last_affected":"1.50"},{"introduced":"1.52"},{"last_affected":"1.52"},{"introduced":"1.53"},{"last_affected":"1.53"},{"introduced":"1.54"},{"last_affected":"1.54"},{"introduced":"1.55"},{"last_affected":"1.55"},{"introduced":"1.60"},{"last_affected":"1.60"},{"introduced":"1.61"},{"last_affected":"1.61"},{"introduced":"1.62"},{"last_affected":"1.62"},{"introduced":"1.63"},{"last_affected":"1.63"},{"introduced":"1.64"},{"last_affected":"1.64"},{"introduced":"1.65"},{"last_affected":"1.65"},{"introduced":"1.66"},{"last_affected":"1.66"},{"introduced":"1.67"},{"last_affected":"1.67"},{"introduced":"1.68"},{"last_affected":"1.68"},{"introduced":"1.69"},{"last_affected":"1.69"},{"introduced":"1.70"},{"last_affected":"1.70"},{"introduced":"1.71"},{"last_affected":"1.71"},{"introduced":"1.72"},{"last_affected":"1.72"}],"source":"AFFECTED_FIELD"}}],"versions":["1.0","1.1","1.20","1.25","1.30","1.31","1.35","1.40","1.45","1.50","1.52","1.53","1.54","1.55","1.60","1.61","1.62","1.63","1.64","1.65","1.66","1.67","1.68","1.69","1.70","1.71","1.72","v1.72_release","v1.71_release","v1.70_release","v1.69_release","v1.68_release","v1.67_release","v1.66_release","v1.65_release","v1.64_release","v1.63_release","v1.62_release","v1.61_release","v1.60_release","v1.55_release","v1.54_release","v1.53_release","v1.52_release","v1.50_release","v1.45_release","v1.40_release","v1.35_release","v1.31_release","v1.30_release","v1.25_release","v1.20_release","v1.10_release","v1.00"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6441.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}]}