| Package | Affected versions | Patched versions |
|---|---|---|
| openitcockpit | < 3.7.3 | 3.7.3 |
app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests (aka SSRF) via the Test Connection feature (aka testGrafanaConnection) of the Grafana Module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free