My-netdata Netdata — known CVE vulnerabilities

Every CVE whose affected-product data names My-netdata Netdata, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-18838 — CVSS 7.5 (high): An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.
• CVE-2018-18836 — CVSS 6.5 (medium): An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data…
• CVE-2018-18837 — CVSS 6.1 (medium): An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of…
• CVE-2018-18839 — CVSS 5.3 (medium): An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional.