Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/26 11:0 p.m.15 views

Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing

Summary An authenticated non-admin user who owns any server can create or update a NAT profile whose domain is equal to the dashboard's own HTTP Host for example, dashboard.example:8008. The dashboard's top-level HTTP/gRPC multiplexer checks NATShared.GetNATConfigByDomainr.Host before dispatching...

6.5CVSS5.8AI score0.00282EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder