OpenTSDB Cross-site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-13003 · ADVISORY
• OpenTSDB/opentsdb · WEB
• OpenTSDB/opentsdb · PACKAGE

More vulnerabilities in net.opentsdb:opentsdb

• CVE-2023-36812CRITICAL 9.8OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability …
• CVE-2023-25827MEDIUM 6.1 Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging endpoint, it is possi…
• CVE-2023-25826CRITICAL 9.8Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple…
• CVE-2020-35476CRITICAL 9.8A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is wr…
• CVE-2018-12973MEDIUM 6.1An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI.