Описание
An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.
Ссылки
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:my-netdata:netdata:1.10.0:*:*:*:*:*:*:*
EPSS
Процентиль: 70%
0.0062
Низкий
6.1 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-113
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 6 лет назад
An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.
CVSS3: 6.1
debian
больше 6 лет назад
An issue was discovered in Netdata 1.10.0. HTTP Header Injection exist ...
CVSS3: 6.1
github
больше 3 лет назад
An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.
EPSS
Процентиль: 70%
0.0062
Низкий
6.1 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-113