CVE-2020-10791

Publication date

2020-03-25 13:58:31

Family

mitre

State

PUBLISHED

Description

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests (aka SSRF) via the Test Connection feature (aka testGrafanaConnection) of the Grafana Module.