Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Uptime Kuma ausnutzen, um Informationen offenzulegen.
Product
Uptime Kuma ist eine Open-Source-Software zur Überwachung der Verfügbarkeit von Diensten und Servern.
Vulnerabilities 1
-
Medium 6.5
Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)
Uptime Kuma is an open source, self-hosted monitoring tool. In versions 1.23.0 through 2.2.0, the fix from GHSA-vffh-c9pq-4crh doesn't fully work to preventServer-side Template Injection (SSTI). The three mitigations added to the Liquid engine (root, relative…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2026-03-22 mit PoC
https://github.com/louislam/uptime-kuma/security/advisories/GHSA-v832-4r73-wx5j
-
EU Vulnerability Database vom 2026-03-22
https://euvd.enisa.europa.eu/enisa/EUVD-2026-13670