In breve
- CVE-2018-12972 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda net.opentsdb:opentsdb, opentsdb (opentsdb).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.9% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
Description
An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input.
NVD description
An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free