CVE-2020-10791

OpenITCOCKPIT contains an SSRF vulnerability in GrafanaModule’s GrafanaConfigurationController.php. Affected versions are before 3.7.3; remote authenticated users can trigger outbound TCP requests via the Test Connection (testGrafanaConnection) feature. Evidence: CVE-2020-10791 and Red Hat/CNVD/O...

CVE-2020-10791: Server-Side Request Forgery (SSRF)

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests aka SSRF via the Test Connection feature aka testGrafanaConnection of the Grafana Module...