OpenTSDB vulnerable to OS Command Injection

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-12972 · ADVISORY
• OpenTSDB/opentsdb · WEB
• OpenTSDB/opentsdb · PACKAGE

Weitere Schwachstellen in net.opentsdb:opentsdb

• CVE-2023-36812KRITISCH 9.8OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability …
• CVE-2023-25827MITTEL 6.1 Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging endpoint, it is possi…
• CVE-2023-25826KRITISCH 9.8Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple…
• CVE-2020-35476KRITISCH 9.8A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is wr…
• CVE-2018-13003MITTEL 6.1An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI.