CVE-2023-22496-PoC

CVE-2023-22496 — PoC di Iniezione di Comandi OS in Netdata Agent Gravità : Critica CVSS 9.8 Versione affetta : Netdata Agent Corretto in : v1.37.0 Tipo : Iniezione di comandi OS CWE-78 Panoramica CVE-2023-22496 è una vulnerabilità di iniezione di comandi OS nel sistema di notifica degli allarmi...

Remote Code Execution (RCE)

netdata is vulnerable to Remote Code Execution RCE. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent when an alert is triggered. This can be done by providing a specially crafted registryhostname as part of the health da...

DEBIAN-CVE-2023-22496

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...