CVE-2018-12972

2018-06-2905:29:00

Google

osv.dev

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.9%

JSON

An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input.

CPENameOperatorVersion
opentsdbeq2.0.0RC2
opentsdbeq2.0.0RC1
opentsdbeq2.1.2
opentsdbeq2.0.0
opentsdbeq1.0.0
opentsdbeq2.0.0RC3
opentsdbeq2.1.1
opentsdbeq2.3.0RC1
opentsdbeq2.1.3
opentsdbeq2.2.2

Name	Operator	Version
opentsdb	eq	2.0.0RC2
opentsdb	eq	2.0.0RC1
opentsdb	eq	2.1.2
opentsdb	eq	2.0.0
opentsdb	eq	1.0.0
opentsdb	eq	2.0.0RC3
opentsdb	eq	2.1.1
opentsdb	eq	2.3.0RC1
opentsdb	eq	2.1.3
opentsdb	eq	2.2.2