CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-27523
https://notcve.org/view.php?id=CVE-2021-27523
An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface. • https://github.com/open-falcon/dashboard/issues/153 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-26245
https://notcve.org/view.php?id=CVE-2022-26245
Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go. Se ha detectado que Falcon-plus versión v0.3, contiene una vulnerabilidad de inyección SQL por medio del parámetro grpName en el archivo /config/service/host.go • https://github.com/open-falcon/falcon-plus/issues/951 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •