Skip to content
OpenAdvisories

Package · Go

github.com/naiba/nezha

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4

    Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host

    Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.10, an authenticated Nezha dashboard user can create or update a DDNS profile with provider webhook and configure an arbi…