CVE-2018-12973

2018-06-2905:29:00

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter ‘json’ to the /q URI.

CPENameOperatorVersion
opentsdbeq2.0.0RC2
opentsdbeq2.0.0RC1
opentsdbeq2.1.2
opentsdbeq2.0.0
opentsdbeq1.0.0
opentsdbeq2.0.0RC3
opentsdbeq2.1.1
opentsdbeq2.3.0RC1
opentsdbeq2.1.3
opentsdbeq2.2.2

Name	Operator	Version
opentsdb	eq	2.0.0RC2
opentsdb	eq	2.0.0RC1
opentsdb	eq	2.1.2
opentsdb	eq	2.0.0
opentsdb	eq	1.0.0
opentsdb	eq	2.0.0RC3
opentsdb	eq	2.1.1
opentsdb	eq	2.3.0RC1
opentsdb	eq	2.1.3
opentsdb	eq	2.2.2