Skip to content
Threat Feed
Subscribe

Product

SigNoz (0.87.0 <= v < 0.142.0)

1 brief RSS
high advisory

Authorization Bypass in SigNoz Trace-Funnel Analytics

SigNoz versions 0.88.0 through 0.141.0 contain an authorization bypass vulnerability allowing unauthenticated remote attackers to query sensitive trace analytics via the trace-funnel endpoint.

SigNoz +2 authorization-bypass api-security observability sql-injection vulnerability web-application webserver injection
2r 1t 1c updated