graphite-web is vulnerable to Remote Code Execution via renderLocalView function

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2013-5093 · ADVISORY
• graphite-project/graphite-web · PACKAGE
• graphite-project/graphite-web · WEB
• graphite-project/graphite-web · WEB
• pypa/advisory-database · WEB
• rapid7/metasploit-framework · WEB
• web.archive.org/web/20200228174538/http://www.securityfocus.com/bid/61894 · WEB
• ceriksen.com/2013/08/20/graphite-remote-code-execution-vulnerability-advisory · WEB
• exploit-db.com/exploits/27752 · WEB
• ceriksen.com/2013/08/20/graphite-remote-code-execution-vulnerability-advisory

graphite-web のその他の脆弱性

• CVE-2022-4730中 5.4A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute …
• CVE-2022-4729中 5.4A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Templat…
• CVE-2022-4728中 5.4A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cooki…
• CVE-2017-18638高 7.5send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint c…
• CVE-2013-5943中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML …