CVE-2020-10791

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outb...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests (aka SSRF) via the Test Connection feature (aka testGrafanaConnection) of the Grafana Module.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory openitcockpit.io
patch github.com