CVE-2021-36157

creationtimestamp| type| source ---|---|--- 2021-08-03 18:27:50+00:00| seen| https://t.me/cibsecurity/26739...

CVE-2021-36157

Grafana Cortex (through 1.9.0) is affected by CVE-2021-36157: an attacker can craft the X-Scope-OrgID header to cause directory traversal, causing Cortex to parse a rules file from a local path and reveal parts of the contents in error messages. There is also a note that other Cortex API requests...