CVE-2020-16248

Prometheus Blackbox Exporter (versions up to 0.17.0) contains a server-side request forgery (SSRF) vulnerability in the /probe endpoint due to an unsanitized target parameter. Exploitation allows an attacker to craft a target value to trigger SSRF, potentially reaching internal assets. The nuclei...

CVE-2023-26735

CVE-2023-26735 affects blackbox_exporter v0.23.0. Technical details across connected sources describe an access-control issue in the probe interface that could allow an attacker to discover intranet ports/services and download resources. The primary description notes this is disputed by third par...