CVE-2020-10791

2020-03-2514:15:12

Google

osv.dev

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

38.6%

JSON

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests (aka SSRF) via the Test Connection feature (aka testGrafanaConnection) of the Grafana Module.