CVE-2024-28216

5.4 mediumEPSS 0.3%

Medium (5.4) in naver ngrinder. EPSS 0.3% chance of exploitation in the next 30 days.

nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2024-03-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

naver:ngrinder

References

https://cve.naver.com/detail/cve-2024-28216.html
https://cve.naver.com/detail/cve-2024-28216.html

Check your stack JSON