We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-28215



Assignernaver
Reserved2024-03-07
Published2024-03-07
Updated2024-09-06

Description

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

Problem types

CWE-862 Missing Authorization

Product status

Default status
0x4003909740

3.5.9
unaffected

Credits

Peter Stöckli of GitHub Security Lab

References

https://cve.naver.com/detail/cve-2024-28215.html (NAVER Security Advisory)

cve.org CVE-2024-28215

nvd.nist.gov CVE-2024-28215

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-28215
Subscribe to our newsletter to learn more about our work.