CVE-2018-18837: My-Netdata Netdata

Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

Affected products

• My-Netdata Netdata: version 1.10.0 only

Published 2019-06-18. Last modified 2026-06-17.