medium5.3
CVE-2018-18839
An issue was discovered in Netdata 1.10.0.
Impact
An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| My-Netdata | Netdata | Version 1.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/netdata/netdata/commit/92327c9ec211bd1616315abcb255861b130b97ca
- https://github.com/netdata/netdata/pull/4521
- https://www.red4sec.com/cve/netdata_fpd.txt
- https://github.com/netdata/netdata/commit/92327c9ec211bd1616315abcb255861b130b97ca
- https://github.com/netdata/netdata/pull/4521
- https://www.red4sec.com/cve/netdata_fpd.txt