CVE-2018-18837

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
5.8
MEDIUM
Affected
1
PROJECT

Description

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

The fastest path to AI-powered full stack observability, even for lean teams.
GitHubGitHub
79.1K