OpenTSDB Cross-site Scripting vulnerability

2022-05-1403:06:10

Google

osv.dev

0.001 Low

EPSS

Percentile

34.4%

JSON

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter json to the /q URI.

CPENameOperatorVersion
net.opentsdb:opentsdbeq2.2.0
net.opentsdb:opentsdbeq2.3.0-RC1
net.opentsdb:opentsdbeq2.2.2
net.opentsdb:opentsdbeq2.3.0-RC2
net.opentsdb:opentsdbeq2.2.0RC1
net.opentsdb:opentsdbeq2.3.0
net.opentsdb:opentsdbeq2.1.3
net.opentsdb:opentsdbeq2.2.1

Name	Operator	Version
net.opentsdb:opentsdb	eq	2.2.0
net.opentsdb:opentsdb	eq	2.3.0-RC1
net.opentsdb:opentsdb	eq	2.2.2
net.opentsdb:opentsdb	eq	2.3.0-RC2
net.opentsdb:opentsdb	eq	2.2.0RC1
net.opentsdb:opentsdb	eq	2.3.0
net.opentsdb:opentsdb	eq	2.1.3
net.opentsdb:opentsdb	eq	2.2.1