Lucene search
K

104 matches found

RedhatCVE
RedhatCVE
added 2023/01/12 5:35 a.m.23 views

CVE-2022-4730

A flaw was found in the graphite-web package. Affected versions of this package are vulnerable to Cross-site scripting...

5.4CVSS3.3AI score0.00765EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2023/01/12 5:35 a.m.20 views

CVE-2022-4729

A flaw was found in the graphite-web package. Affected versions of this package are vulnerable to Cross-site scripting...

5.4CVSS3.3AI score0.00733EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2023/01/12 5:35 a.m.18 views

CVE-2022-4728

A flaw was found in the graphite-web package. Affected versions of this package are vulnerable to Cross-site scripting...

5.4CVSS3.3AI score0.00765EPSS
Exploits1References3
Veracode
Veracode
added 2023/01/05 6:28 a.m.48 views

Cross-site Scripting (XSS)

graphite-web is vulnerable to cross-site scripting. The vulnerability exists because the views.py does not properly escape the template name attribute before being rendered, allowing an attacker to inject and execute malicious JavaScript...

5.4CVSS5.4AI score0.00733EPSS
Exploits1References5Affected Software2
Veracode
Veracode
added 2023/01/05 4:38 a.m.54 views

Cross-site Scripting (XSS)

graphite-web is vulnerable to cross-site scripting. The vulnerability exists because the updateTimeRange function of dashboard.js does not properly escape the Absolute Time Range values before being rendered, allowing an attacker to inject and execute malicious JavaScript...

5.4CVSS5.4AI score0.00765EPSS
Exploits1References5Affected Software2
Veracode
Veracode
added 2023/01/05 3:29 a.m.53 views

Cross-site Scripting (XSS)

graphite-web is vulnerable to cross-site scripting. The vulnerability exists because the updateTimeRange function of dashboard.js does not properly escape the Relative Time Range values before being rendered, allowing an attacker to inject and execute malicious javascript...

5.4CVSS5.4AI score0.00765EPSS
Exploits1References5Affected Software2
OSV
OSV
added 2022/12/27 3:30 p.m.17 views

GHSA-Q99P-78HP-XG5C Graphite Web Cross-site Scripting vulnerability

A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

5.4CVSS4.5AI score0.00733EPSS
Exploits1References6
OSV
OSV
added 2022/12/27 3:30 p.m.22 views

GHSA-3C5X-4HVX-QRRR Graphite Web Cross-site Scripting vulnerability

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS4.6AI score0.00765EPSS
Exploits1References6
OSV
OSV
added 2022/12/27 3:30 p.m.26 views

GHSA-M973-4VPC-X43C Graphite Web Cross-site Scripting vulnerability

A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

5.4CVSS4.5AI score0.00765EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2022/12/27 3:30 p.m.34 views

Graphite Web Cross-site Scripting vulnerability

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS5.5AI score0.00765EPSS
Exploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/27 3:30 p.m.25 views

Graphite Web Cross-site Scripting vulnerability

A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

5.4CVSS5.4AI score0.00765EPSS
Exploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/27 3:30 p.m.33 views

Graphite Web Cross-site Scripting vulnerability

A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

5.4CVSS5.3AI score0.00733EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2022/12/27 3:15 p.m.23 views

CVE-2022-4728

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS5.2AI score
Exploits0References4
NVD
NVD
added 2022/12/27 3:15 p.m.13 views

CVE-2022-4729

A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

5.4CVSS0.00733EPSS
Exploits1References4
NVD
NVD
added 2022/12/27 3:15 p.m.11 views

CVE-2022-4728

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS0.00765EPSS
Exploits1References4
NVD
NVD
added 2022/12/27 3:15 p.m.14 views

CVE-2022-4730

A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

5.4CVSS0.00765EPSS
Exploits1References4
OSV
OSV
added 2022/12/27 3:15 p.m.1 views

DEBIAN-CVE-2022-4729

A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

5.4CVSS3.5AI score0.00733EPSS
Exploits1References1
OSV
OSV
added 2022/12/27 3:15 p.m.2 views

DEBIAN-CVE-2022-4728

A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS3.6AI score0.00765EPSS
Exploits1References1
OSV
OSV
added 2022/12/27 3:15 p.m.27 views

CVE-2022-4730

A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

5.4CVSS5.1AI score
Exploits0References4
OSV
OSV
added 2022/12/27 3:15 p.m.1 views

DEBIAN-CVE-2022-4730

A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

5.4CVSS3.5AI score0.00765EPSS
Exploits1References1
Rows per page
Query Builder