'; } else{ echo ''; } echo '
|
|
|||
| Rule General Information |
|---|
| Release Date: | 2026-10-08 | |
| Rule Name: | Nezha Monitoring Pre-Auth Path Traversal Vulnerability (CVE-2026-53519) | |
| Severity: | ||
| CVE ID: | ||
| Rule Protection Details |
|---|
| Description: | Nezha Monitoring is an open-source server monitoring tool developed by the Nezha Monitoring organization. Nezha Monitoring versions prior to 2.0.13 contain a security vulnerability. The vulnerability stems from the fallbackToFrontend function in the dashboard's NoRoute handler using strings.HasPrefix instead of path segment matching to validate URLs, allowing attackers to bypass the check by crafting input such as /dashboard../data/config.yaml, leading to arbitrary file read. | |
| Impact: | An attacker could exploit this vulnerability to have unspecified effect. | |
| Affected OS: | Windows, Linux, Others | |
| Reference: | https://www.cnnvd.org.cn/frontend/detail?vulId=99133367 |
|
| Solutions |
|---|
| Please refer to announcements or patches release by the vendor. |