Threats tagged 'ghsa-9wr3-32qm-xqr7'

Kener versions 4.0.0 through before 4.1.6 have an information disclosure vulnerability that allows unauthenticated attackers to access hidden or inactive monitor data. This occurs because certain dashboard API endpoints lack proper visibility filters, enabling attackers to retrieve sensitive details such as monitor names, descriptions, status, uptime history, and latency by supplying a known or guessed monitor tag.