CVE:CVE-2023-0871
CNNVD:CNNVD-202303-2825
OpenNMS Horizon是OpenNMS公司的一种开源解决方案，可帮助您可视化和监控本地和远程网络上的所有内容。
OpenNMS Horizon 31.0.8版本至32.0.2之前版本存在安全漏洞。攻击者利用该漏洞强制Horizon发出任意HTTP请求到内部和外部服务。
solution:Upgrade opennms horizon to a higher version than 32.0.2,31.0.8,and avoid the version [32.0.0,32.0.2),31.0.8; Upgrade opennms meridian to a higher version than 2020.1.38,2021.1.30,2022.1.9,2023.1.6,and avoid the version [2020.0.0,2020.1.38),[2021.0.0,2021.1.30),[2022.1.0,2022.1.9),[2023.0.0,2023.1.6)