An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/OpenTSDB/opentsdb/issues/1239 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-06-29T05:00:00
Updated: 2024-08-05T08:52:49.213Z
Reserved: 2018-06-28T00:00:00
Link: CVE-2018-12972
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-06-29T05:29:00.253
Modified: 2024-11-21T03:46:10.153
Link: CVE-2018-12972
Redhat
No data.