Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: netdata Component: Netdata Clear all filters
TI-2025-43503 CVE-2025-71385 · GHSA-rwcv-c3fr-4hrw

Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint

Priority LOW 24

Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoints verbatim into the generated SVG document (into a text element) without HTML or XML escaping, and…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0043 Published 2026-07-02 Fixed in 2.3.1 CWE-79
TI-2023-08745 CVE-2023-22497

Netdata is vulnerable to improper authentication

Priority HIGH 72

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00699 Published 2023-01-14 Fixed in 1.36.0-409, 1.37 CWE-287
TI-2023-08744 CVE-2023-22496

Netdata vulnerable to command injection

Priority HIGH 76

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.36171 Published 2023-01-14 Fixed in 1.36.0-409, 1.37 CWE-20