CVE-2020-16248

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF

published August 9, 2020

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03106 · 87.7th percentile
Published
2020-08-09T16:16Z
EPSS history
Timeline
  • 09 AUG 16:16Z
    Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF
    cvelistv5