github.com/nezhahq/nezha vulnerabilities (Go)
17 vulnerabilities.
-
github.com/nezhahq/nezhaGo Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant 6.5 Medium -
github.com/nezhahq/nezhaGo Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri 9.3 Critical -
github.com/nezhahq/nezhaGo Nezha Monitoring: DDNS and Notification credential exposure via unredacted list API 6.9 Medium -
github.com/nezhahq/nezhaGo Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check 9.9 Critical -
github.com/nezhahq/nezhaGo Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection 6.8 Medium -
github.com/nezhahq/nezhaGo Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS 6.5 Medium -
github.com/nezhahq/nezhaGo Nezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context 6.4 Medium -
github.com/nezhahq/nezhaGo Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing 6.5 Medium -
github.com/nezhahq/nezhaGo Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key 9.1 Critical -
github.com/nezhahq/nezhaGo Nezha Monitoring: Private services (`EnableShowInService: false`) are enumerable via per-server endpoints, leaking name and timing data 5.3 Medium -
github.com/nezhahq/nezhaGo Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents 7.1 High -
github.com/nezhahq/nezhaGo Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services 7.1 High -
github.com/nezhahq/nezhaGo Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host 6.4 Medium -
github.com/nezhahq/nezhaGo Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members 6.5 Medium -
github.com/nezhahq/nezhaGo Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron 9.9 Critical -
github.com/nezhahq/nezhaGo Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check) 7.1 High -
github.com/nezhahq/nezhaGo Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification 7.7 High