Lucene search
K

CVE-2020-35476

🗓️ 16 Dec 2020 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 175 Views🌐 WEB

A remote code execution vulnerability in OpenTSDB 2.4.0 allows command injection in the yrange parameter

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
0day.today
OpenTSDB 2.4.0 Command Injection Exploit
24 Dec 202200:00
zdt
GithubExploit
Exploit for OS Command Injection in Opentsdb
7 Sep 202313:47
githubexploit
Circl
CVE-2020-35476
16 Dec 202015:25
circl
CNNVD
OpenTSDB 操作系统命令注入漏洞
16 Dec 202000:00
cnnvd
CNVD
OpenTSDB Command Injection Vulnerability
17 Dec 202000:00
cnvd
Check Point Advisories
StumbleUpon OpenTSDB Remote Code Execution (CVE-2020-35476)
10 Feb 202100:00
checkpoint_advisories
Cvelist
CVE-2020-35476
16 Dec 202000:00
cvelist
Github Security Blog
OS Command Injection in OpenTSDB
2 Aug 202117:02
github
Metasploit
OpenTSDB 2.4.0 unauthenticated command injection
23 Dec 202219:51
metasploit
Nuclei
OpenTSDB <=2.4.0 - Remote Code Execution
1 Jun 202603:02
nuclei
Rows per page
NVD
Node
opentsdbopentsdbRange2.4.0
ParameterPositionPathDescriptionCWE
yrangequery param/qOpenTSDB unauthenticated command injection via the yrange parameter in the /q endpoint to execute a payloadCWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:27Current
9.7High risk
Vulners AI Score9.7
CVSS 27.5
CVSS 3.19.8
EPSS0.9425
175