CVE-2023-22496-PoC

CVE-2023-22496 — PoC de Inyección de Comandos del SO en Netdata Agent Gravedad : Crítica CVSS 9.8 Afectado : Netdata Agent Corregido en : v1.37.0 Tipo : Inyección de Comandos del SO CWE-78 Resumen CVE-2023-22496 es una vulnerabilidad de inyección de comandos del SO en el sistema de notificación d...

Remote Code Execution (RCE)

netdata is vulnerable to Remote Code Execution RCE. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent when an alert is triggered. This can be done by providing a specially crafted registryhostname as part of the health da...

DEBIAN-CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...