Product

SigNoz (0.88.0 - 0.141.0)

1 brief RSS

Authorization Bypass in SigNoz Trace-Funnel Analytics

SigNoz versions 0.88.0 through 0.141.0 contain an authorization bypass vulnerability allowing unauthenticated remote attackers to query sensitive trace analytics via the trace-funnel endpoint.

SigNoz +2 authorization-bypass api-security observability sql-injection vulnerability web-application webserver injection

2r 1t 1c updated 1d ago