CVE-2024-26479: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the Command execution function...

CVE-2024-26479

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the Command execution function...

CVE-2024-26479

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the Command execution function...

PT-2026-7652

Name of the Vulnerable Software and Affected Versions Statping-ng version 0.91.0 Description An issue allows an attacker to obtain sensitive information via a crafted request to the /api/users endpoint. The vulnerable parameter is not specified. Recommendations Update to a newer version that...

CVE-2024-26477

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth, amazonsns, export endpoints...

CVE-2024-26477

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth, amazonsns, export endpoints...

CVE-2024-26478

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the /api/users endpoint...

CVE-2024-26480

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the admin parameter...

PT-2026-7654

Name of the Vulnerable Software and Affected Versions Statping-ng version 0.91.0 Description An issue allows an attacker to obtain sensitive information via a crafted request to the admin parameter. The issue is present in the application's handling of requests to the /admin API endpoint. The...

CVE-2024-26479

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information by sending a crafted request to the Command execution function . Additionally, the software is vulnerable to Incorrect Authorization via sensitive API endpoints, enabling low-privileged users to bypass checks to a...

CVE-2024-26477

The open-source monitoring software Statping-ng v.0.91.0 is vulnerable to the exposure of sensitive information due to improper handling of crafted requests. Specifically, an attacker can target the api parameter within the oauth , amazon_sns , and export endpoints. Additionally, the /api/users e...

CVE-2024-26480

Statping-ng v.0.91.0 is vulnerable to Command Injection via the command execution functionality in the github.com/statping-ng/statping-ng/handlers package. An attacker can exploit this by sending a crafted request to the admin parameter , potentially executing a malicious binary with the privileg...