-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/prometheus/blackbox_exporter | go | <= 0.23.0 |
Miggo AIRoot Cause AnalysisThe advisory was withdrawn as it was determined to be a configuration issue rather than a code vulnerability. The original report described SSRF-like behavior in the probe interface, but the maintainers clarified that authentication controls are available via configuration (TLS/basic auth) and the perceived vulnerability stems from improper configuration rather than flawed functions. No specific vulnerable functions were identified in the provided code references, issue discussions, or CVE details. The 'probe' endpoint handler is inherently capable of making external requests by design, but its security depends on proper access control configuration rather than specific function-level vulnerabilities.