SigNoz versions 0.88.0 through 0.141.0 contain an authorization bypass vulnerability allowing unauthenticated remote attackers to query sensitive trace analytics via the trace-funnel endpoint.
SigNoz +3
authorization-bypass
api-security
observability
sql-injection
vulnerability
web-application
webserver
injection
+2
3r
3t
1c
updated