CVE-2024-28215 - AskarLabs CVE Database

CVE-2024-28215

Weakness CWE-862 · Missing authorization

Published March 7, 2024

Last update September 6, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.

Key dates

02Disclosure timeline

March 7, 2024 CVE published

September 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-28215 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2022-40223 WordPress SearchWP premium plugin <= 4.2.5 - Broken Authentication vulnerability CVE-2025-68976 WordPress Eagle Booking plugin <= 1.3.4.3 - Settings Change vulnerability CVE-2026-53815 OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions CVE-2025-62141 WordPress Wawp plugin <= 4.4 - Broken Access Control vulnerability CVE-2026-27678 Missing Authorization check in SAP S/4HANA Backend OData Service (Manage Reference Structures)