CVE

CVE-2020-16248

5.8

CVSS

Description

Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability

Attack Vector

Privileges Req.

User Interaction

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~1 minutes

CVE-2020-16248 Scanner

CVE-2020-16248 Scanner - Server-Side Request Forgery (SSRF) vulnerability in Prometheus Blackbox Exporter

Used 3.1k times · 3.4k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →