CVE-2024-28216CWE-862

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information…

Medium · published March 7, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-03-07T04:50Z
EPSS history
Timeline
  • 07 MAR 04:50Z
    nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information…
    cvelistv5