Lucene search
+L

11 matches found

Github Security Blog
Github Security Blog
added 2026/05/23 12:8 a.m.24 views

Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check)

Summary createAlertRule and createService and their update siblings accept FailTriggerTasks uint64 and RecoverTriggerTasks uint64 — IDs of cron tasks to fire when the alert/service trips. The validation function only validates the alert's Rules.Ignore server map; it never checks that the cron tas...

7.1CVSS5.9AI score0.00261EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder