CVE-2024-28215

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery...

CVE-2024-28215

CVE-2024-28215 affects nGrinder prior to 3.5.9. The issue arises from lack of access control, allowing an attacker to create or update webhook configurations, which could lead to information disclosure and limited Server-Side Request Forgery. Affected installations should upgrade to version 3.5.9...