exploitDog

GHSA-hqrf-v6fm-gv6x

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2018-18838
https://github.com/netdata/netdata/pull/4521
https://github.com/netdata/netdata/commit/92327c9ec211bd1616315abcb255861b130b97ca
https://www.red4sec.com/cve/netdata_log_injection.txt

EPSS

Процентиль: 82%

0.02172

Низкий

CVE ID

Связанные уязвимости

CVE-2018-18838

CVSS3: 7.5

ubuntu

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.

CVE-2018-18838

CVSS3: 7.5

nvd

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.

CVE-2018-18838

CVSS3: 7.5

debian

больше 7 лет назад

An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forge ...

openSUSE-SU-2021:1603-1

suse-cvrf

почти 5 лет назад

Security update for netdata

openSUSE-SU-2021:0647-1

suse-cvrf

больше 5 лет назад

Security update for netdata

EPSS

Процентиль: 82%

0.02172

Низкий

CVE ID