| Package | Affected versions | Patched versions |
|---|---|---|
| cribl stream | < 4.18.2 | 4.18.2 |
Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free