Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5cwx-g8mg-7v9c

Опубликовано: 05 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

Grafana OnCall is an easy-to-use on-call management tool that will help reduce toil in on-call management through simpler workflows and interfaces that are tailored specifically for engineers.

Grafana OnCall, from version 1.1.37 before 1.5.2 are vulnerable to a Server Side Request Forgery (SSRF) vulnerability in the webhook functionallity.

This issue was fixed in version 1.5.2

Grafana OnCall is an easy-to-use on-call management tool that will help reduce toil in on-call management through simpler workflows and interfaces that are tailored specifically for engineers.

Grafana OnCall, from version 1.1.37 before 1.5.2 are vulnerable to a Server Side Request Forgery (SSRF) vulnerability in the webhook functionallity.

This issue was fixed in version 1.5.2

EPSS

Процентиль: 52%
0.00291
Низкий

7.7 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.7
nvd
больше 1 года назад

Grafana OnCall is an easy-to-use on-call management tool that will help reduce toil in on-call management through simpler workflows and interfaces that are tailored specifically for engineers. Grafana OnCall, from version 1.1.37 before 1.5.2 are vulnerable to a Server Side Request Forgery (SSRF) vulnerability in the webhook functionallity. This issue was fixed in version 1.5.2

CVSS3: 9.1
fstec
больше 1 года назад

Уязвимость компонента webhook системы управления оповещениями Grafana OnCall, позволяющая нарушителю осуществить SSRF-атаку

EPSS

Процентиль: 52%
0.00291
Низкий

7.7 High

CVSS3

Дефекты

CWE-918