CVE-2020-10792

openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or "staging" in the HTTP Host header.

openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or "staging" in the HTTP Host header.

openITCOCKPIT versiones hasta 3.7.2, permite a atacantes remotos configurar la opción self::DEVELOPMENT o self::STAGING al colocar un nombre de host que contenga "dev" o "staging" en el encabezado HTTP Host.