CVE-2024-28214

2024-03-0705:15:54

CWE-400

[email protected]

web.nvd.nist.gov

ngrinder

delay setting

dos

cve-2024-28214

nvd

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker.

CNA Affected

[
  {
    "vendor": "NAVER",
    "product": "nGrinder",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.5.9"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

cve.naver.com/detail/cve-2024-28214.html