Description (CNA)
nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NAVER / nGrinder | unaffected 3.5.9 |
CWE
CWE-862
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.