VULNERABILITY INTELLIGENCE

CVE-2020-10791

CVSS score6.5 MEDIUM

EPSS probability1.15%

CISA KEVNot currently listed

Published2020-03-25

Last modified2026-06-17

Description

app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP requests (aka SSRF) via the Test Connection feature (aka testGrafanaConnection) of the Grafana Module.