nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://cve.naver.com/detail/cve-2024-28215.html |
Configurations
No configuration.
History
07 Mar 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
07 Mar 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-07 05:15
Updated : 2024-03-07 13:52
NVD link : CVE-2024-28215
Mitre link : CVE-2024-28215
CVE.ORG link : CVE-2024-28215
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control