Full Path Disclosure Vulnerability in Netdata by Netdata

CVE-2018-18839

What is CVE-2018-18839?

A Full Path Disclosure vulnerability was identified in Netdata version 1.10.0, allowing unauthorized users to gain information about the server's file structure through the api/v1/alarms endpoint. This exposure may lead to further exploitation by providing insights into the web application's directory layout, which could facilitate additional attacks. It is important to note that the vendor has stated that this behavior is intentional, raising concerns about information security practices.

References