My Netdata Netdata vulnerabilities

4 vulnerabilities

Known vulnerabilities in My Netdata Netdata, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2018-18836debiannetdata+2
EPSS score
1.96%
An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.5.3CVE-2018-18839debiannetdata+2
EPSS score
1.87%
An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.7.5CVE-2018-18838debiannetdata+2
EPSS score
2.17%
An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.6.1CVE-2018-18837debiannetdata+2
EPSS score
1.75%
An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.