CVE-2024-28216

CVSS 5.4 MEDIUMEPSS 0.3%CWE-862

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

NAVER · nGrinder

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://cve.naver.com/detail/cve-2024-28216.html