CVE-2023-36656

MEDIO 5.4CVE-2023-36656 · Published 17/07/2023 · updated 17/06/2026

En resumen

CVE-2023-36656 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a jaeger ui (jaegertracing).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 66.2% de las vulnerabilidades.
Solución: actualizar a 1.31.0 o posterior.

Package	Affected versions	Patched versions
jaeger ui jaegertracing	`< 1.31.0`	`1.31.0`

Description

Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component.

References

jaegertracing/jaeger-ui#1498 · Patch
jaegertracing/jaeger-ui security advisory · Exploit
mafintosh/json-markup#15 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free