Описание
An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth, amazon_sns, export endpoints.
Ссылки
- ExploitThird Party Advisory
- Third Party Advisory
- Product
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:statping-ng:statping-ng:0.91.0:*:*:*:*:*:*:*
EPSS
Процентиль: 40%
0.00494
Низкий
7.5 High
CVSS3
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 7.5
github
6 месяцев назад
An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth, amazon_sns, export endpoints.
EPSS
Процентиль: 40%
0.00494
Низкий
7.5 High
CVSS3
Дефекты
CWE-200