CVE-2024-28215CWE-862

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information…

High · published March 7, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00547 · 45.1th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-03-07T04:50Z
EPSS history
Timeline
  • 07 MAR 04:50Z
    nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information…
    cvelistv5