CVE-2024-28215

7.5 highEPSS 0.5%

High (7.5) in naver ngrinder. EPSS 0.5% chance of exploitation in the next 30 days.

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2024-03-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

naver:ngrinder

References

https://cve.naver.com/detail/cve-2024-28215.html
https://cve.naver.com/detail/cve-2024-28215.html

Check your stack JSON