Security Advisory
CVE-2020-10791
6.5
MEDIUM
Vulnerability Description
app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests (aka SSRF) via the Test Connection feature (aka testGrafanaConnection) of the Grafana Module.
Published Date
March 25, 2020
Official Source
NIST NVD Advisory