Lucene search
+L

11 matches found

OSV
OSV
added 2026/05/23 12:8 a.m.16 views

GHSA-RXF6-WJH4-JFJ6 Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check)

Summary createAlertRule and createService and their update siblings accept FailTriggerTasks uint64 and RecoverTriggerTasks uint64 — IDs of cron tasks to fire when the alert/service trips. The validation function only validates the alert's Rules.Ignore server map; it never checks that the cron tas...

5.4CVSS5.9AI score0.00261EPSS
SaveExploits0References3
Rows per page
Query Builder