CVE-2016-5060

Description

References

• packetstormsecurity.com/files/137469/nGrinder-3.3-Cross-Site-Scripting.html · Third Party Advisory
• seclists.org/fulldisclosure/2016/Jun/23 · Third Party Advisory
• naver/ngrinder · Patch
• naver/ngrinder release ngrinder-3.4-20160525 · Release Notes

Altre vulnerabilità di ngrinder

• CVE-2024-28216MEDIO 5.4nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause o…
• CVE-2024-28215ALTO 7.5nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause o…
• CVE-2024-28214BASSO 2.7nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker.
• CVE-2024-28213CRITICO 9.8nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbi…
• CVE-2024-28212CRITICO 9.8nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.