CVE-2023-22496-PoC

CVE-2023-22496 — Netdata Agent OS Command Injection PoC 심각도 : 치명적 CVSS 9.8 영향받는 버전 : Netdata Agent 수정 버전 : v1.37.0 유형 : OS Command Injection CWE-78 개요 CVE-2023-22496 은 Netdata의 health 알림 시스템에서 발생하는 OS 명령어 삽입 취약점입니다. 스트리밍 체인의 모든 노드에 있는 registryhostname이 셸 명령어에 삽입될 때 정제sanitisation되지 않습니다. Netdata ...

Remote Code Execution (RCE)

netdata is vulnerable to Remote Code Execution RCE. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent when an alert is triggered. This can be done by providing a specially crafted registryhostname as part of the health da...

DEBIAN-CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...

CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function "healthalarmexecute" is called. Thi...

CVE-2023-22496: Improper Input Validation

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...