Skip to content
OpenAdvisories

Package · Ubuntu

graphite-web

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2017-18638 EPSS 15%

    graphite.composer.views.send_email vulnerable to SSRF

    send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource. The response to this SSRF request is en…

    graphite-web graphite-web graphite-web Debian Ubuntu PyPI