CVE-2018-18836

Mô tả

Tham khảo

• netdata/netdata · Exploit
• netdata/netdata · Exploit
• netdata/netdata commit 92327c9 · Patch
• netdata/netdata#4521 · Third Party Advisory
• red4sec.com/cve/netdata_json_injection.txt · Third Party Advisory

Lỗ hổng khác của netdata

• CVE-2018-18839TRUNG BÌNH 5.3An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.
• CVE-2018-18838CAO 7.5An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.
• CVE-2018-18837TRUNG BÌNH 6.1An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_req…