CVE-2020-10791

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP…

published March 25, 2020

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests (aka SSRF) via the Test Connection feature (aka testGrafanaConnection) of the Grafana Module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01151 · 66.7th percentile
Published
2020-03-25T13:58Z
EPSS history
Timeline
  • 25 MAR 13:58Z
    app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP…
    cvelistv5