CVE-2024-28216 in nGrinder

الملخص

بحسب MITRE • 07/03/2024

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 07/03/2024
• إفشاء: 07/03/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-255982
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• CVSS: 5.4 (CNA)
• EPSS: 0.00333
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-28216
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-28216
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-28216/