https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:58:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-29330 EUVD-2026-29330 https://cve.radiocsirt.org/vuln/euvd-2026-29330 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36157 <p>An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Cortex will attempt to parse a rules file at that location and include some of the contents in the error message. (Other Cortex API requests can also be sent a malicious OrgID header, e.g., tricking the ingester into writing metrics to a different location, but the effect is nuisance rather than information disclosure.)</p> <p>An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Cortex will attempt to parse a rules file at that location and include some of the contents in the error message. (Other Cortex API requests can also be sent a malicious OrgID header, e.g., tricking the ingester into writing metrics to a different location, but the effect is nuisance rather than information disclosure.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36157 https://cve.radiocsirt.org/vuln/ghsa-jphm-g89m-v42p <p><strong>Affected:</strong> Go: github.com/cortexproject/cortex</p> <p>An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Cortex will attempt to parse a rules file at that location and include some of the contents in the error message. (Other Cortex API requests can also be sent a malicious OrgID header, e.g., tricking the ingester into writing metrics to a different location, but the effect is nuisance rather than information disclosure.)</p> <p><strong>Affected:</strong> Go: github.com/cortexproject/cortex</p> <p>An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Cortex will attempt to parse a rules file at that location and include some of the contents in the error message. (Other Cortex API requests can also be sent a malicious OrgID header, e.g., tricking the ingester into writing metrics to a different location, but the effect is nuisance rather than information disclosure.)</p> https://cve.radiocsirt.org/vuln/ghsa-jphm-g89m-v42p https://cve.radiocsirt.org/vuln/gsd-2021-36157 gsd-2021-36157 https://cve.radiocsirt.org/vuln/gsd-2021-36157 https://cve.radiocsirt.org/vuln/rhsa-2023:3304 <p>dns: Denial of Service (DoS) cortex: Grafana Cortex directory traversal golang: path/filepath: path-filepath filepath.Clean path traversal golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding</p> <p>dns: Denial of Service (DoS) cortex: Grafana Cortex directory traversal golang: path/filepath: path-filepath filepath.Clean path traversal golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding</p> https://cve.radiocsirt.org/vuln/rhsa-2023:3304 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1354 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1354