openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HIt Novum Openitcockpit
APPIt-Novum< 3.7.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SSRF
CWE
Related vulnerabilities
CVE-2020-10789CRITICAL9.8ten sam produkt
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via...
CVE-2020-10788CRITICAL9.1ten sam produkt
openITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than generating a ...
CVE-2019-15490CRITICAL9.8ten sam produkt
openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21.
CVE-2026-24893HIGH8.8ten sam produkt
openITCOCKPIT is an open source monitoring tool built for different monitoring engines. openITCOCKPIT Communit...
CVE-2026-24891HIGH7.5ten sam produkt
openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and...