Back to Database
Status published
Medium
CVE-2020-10791
app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to...
Vulnerability Description
app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests (aka SSRF) via the Test Connection feature (aka testGrafanaConnection) of the Grafana Module.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10791
Credits & Attribution
No credits recorded in the NVD database.
References
More from it-novum
View All →CVE-2023-3520
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit
Medium
4.3
CVE-2023-3218
Race Condition within a Thread in it-novum/openitcockpit
Medium
6.5
CVE-2020-10792
openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT...
High
7.5
CVE-2020-10790
openITCOCKPIT before 3.7.3 has unnecessary files (such as Lodash files)...
Medium
5.4
CVE-2020-10789
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers...
Critical
9.8
Affected Vendor
it-novum
View all reports →Affected Software
openitcockpit
Vulnerable Versions:
0
Timeline
Official Publish:
March 25th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.