PT-2020-12325

Name of the Vulnerable Software and Affected Versions openITCOCKPIT versions prior to 3.7.3 Description The issue allows remote authenticated users to trigger outbound TCP requests, also known as Server-Side Request Forgery SSRF, via the Test Connection feature of the Grafana Module. This is...

CVE-2020-10791: Server-Side Request Forgery (SSRF)

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests aka SSRF via the Test Connection feature aka testGrafanaConnection of the Grafana Module...