CVE-2020-16248

2020-08-0916:16:27

mitre

www.cve.org

EPSS

0.001

Percentile

49.9%

JSON

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability

References

github.com/prometheus/blackbox_exporter/issues/669

prometheus.io/docs/operating/security/#exporters

seclists.org/oss-sec/2020/q3/94

www.openwall.com/lists/oss-security/2020/08/08/12

www.openwall.com/lists/oss-security/2020/08/08/3

EPSS

0.001

Percentile

49.9%

JSON

Related for CVELIST:CVE-2020-16248