CVE-2020-10792

openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or…

published March 20, 2020

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or "staging" in the HTTP Host header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01943 · 80.0th percentile
Published
2020-03-20T17:48Z
EPSS history
Timeline
  • 20 MAR 17:48Z
    openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or…
    cvelistv5