OS Command Injection in OpenTSDB

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-35476 · ADVISORY
• OpenTSDB/opentsdb · WEB
• packetstormsecurity.com/files/170331/OpenTSDB-2.4.0-Command-Injection.html · WEB

Lỗ hổng khác của net.opentsdb:opentsdb

• CVE-2023-36812NGHIÊM TRỌNG 9.8OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability …
• CVE-2023-25827TRUNG BÌNH 6.1 Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging endpoint, it is possi…
• CVE-2023-25826NGHIÊM TRỌNG 9.8Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple…
• CVE-2018-13003TRUNG BÌNH 6.1An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI.
• CVE-2018-12973TRUNG BÌNH 6.1An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI.