2 results · Clear filters · Feed
-
Medium 6.5
M/Monit 3.7.4 - Password Disclosure
M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpoint. Attackers can send requests to the /api/1/admin/users/list and /api/1/admin/users/get endpoints…
-
Medium 6.5
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable a…