CVE-2024-28214: Low severity ngrinder vulnerability
Published Mar 7, 2024
·Updated
nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker.
Affected Software
2 affected components
NAVER Ngrinder<3.5.9
nGrinder nGrinder<3.5.9
Event History
Mar 7, 2024
CVE Published
via MITRE·04:49 AM
Data Sourced
via MITRE·04:49 AM
DescriptionWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-28214?
CVE-2024-28214 has a high severity rating due to its potential to cause Denial of Service.
2
How do I fix CVE-2024-28214?
To fix CVE-2024-28214, update nGrinder to version 3.5.9 or later.
3
What are the consequences of CVE-2024-28214?
The consequences of CVE-2024-28214 include the risk of Denial of Service attacks by allowing unlimited delay settings.
4
Which versions of nGrinder are affected by CVE-2024-28214?
Versions of nGrinder before 3.5.9 are affected by CVE-2024-28214.
5
Who can exploit CVE-2024-28214?
CVE-2024-28214 can be exploited by remote attackers to impact the availability of the service.