We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-28216



Assignernaver
Reserved2024-03-07
Published2024-03-07
Updated2024-09-06

Description

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

Problem types

CWE-862 Missing Authorization

Product status

Default status
0x4007230240

3.5.9
unaffected

Credits

Peter Stöckli of GitHub Security Lab

References

https://cve.naver.com/detail/cve-2024-28216.html (NAVER Security Advisory)

cve.org CVE-2024-28216

nvd.nist.gov CVE-2024-28216

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-28216
Subscribe to our newsletter to learn more about our work.