Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-28216 EUVD-2024-25334GHSA-wcmh-ghjh-4j2h

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause …

Published Mar 7, 2024 · Updated Sep 6, 2024 · Assigned by naver

Description

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

Affected products

VendorProductAffectedFixed
NAVER nGrinder — 3.5.9

References