Approved changes feed: RSS · Atom

cpe:2.3:a:naver:ngrinder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNaver (2e3d4894-d5bf-53f1-9aff-80b030ad77c4)
ProductNgrinder (9e0a694b-4be5-5998-9fb0-01657411504e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/naver/ngrinder purl2cpe 2026-06-01 10:16:14.671784
pkg:sourceforge/ngrinder purl2cpe 2026-06-01 10:16:14.671788

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28216 not_vulnerable 2026-06-08 06:33:26.742600 Details available
nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.
Published: 2024-03-07T04:50:15.338Z
Updated: 2024-09-06T04:17:45.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28216 vulnerable 2026-06-08 06:33:26.742557 Details available
nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.
Published: 2024-03-07T04:50:15.338Z
Updated: 2024-09-06T04:17:45.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28215 not_vulnerable 2026-06-08 06:33:26.742247 Details available
nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.
Published: 2024-03-07T04:50:08.422Z
Updated: 2024-09-06T04:15:12.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28215 vulnerable 2026-06-08 06:33:26.742207 Details available
nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.
Published: 2024-03-07T04:50:08.422Z
Updated: 2024-09-06T04:15:12.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28214 vulnerable 2026-06-08 06:33:26.741892 Details available
nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker.
Published: 2024-03-07T04:49:57.531Z
Updated: 2024-11-08T17:07:55.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28214 not_vulnerable 2026-06-08 06:33:26.741849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28213 not_vulnerable 2026-06-08 06:33:26.741426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28213 vulnerable 2026-06-08 06:33:26.733162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28212 not_vulnerable 2026-06-08 06:33:26.732733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28212 vulnerable 2026-06-08 06:33:26.732685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28211 not_vulnerable 2026-06-08 06:33:26.732298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28211 vulnerable 2026-06-08 06:33:26.732109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5060 vulnerable 2026-06-08 05:07:56.216211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.