Lucene search
+L

3 matches found

OSV
OSV
added 2026/01/10 3:31 p.m.7 views

GHSA-XF94-H87H-G9WR QuestDB UI's Web Console is Vulnerable to Cross-Site Scripting

A security flaw has been discovered in questdb ui up to 1.11.9. Impacted is an unknown function of the component Web Console. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading t...

5.1CVSS5.5AI score0.00242EPSS
SaveExploits0References10
Snyk
Snyk
added 2026/01/10 3:31 p.m.5 views

Cross-site Scripting (XSS)

Overview @questdb/web-console is a QuestDB Web Console Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Web Console component. An attacker can inject and execute arbitrary scripts by submitting crafted input that is not properly sanitized. Details Cross-site...

5.1CVSS6AI score0.00242EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/10 12:0 a.m.15 views

PT-2026-2029

Name of the Vulnerable Software and Affected Versions questdb ui versions up to 1.11.9 Description A security flaw exists in the Web Console component of questdb ui, potentially leading to cross-site scripting. The issue is remotely exploitable, and an exploit has been publicly released. The...

5.1CVSS3.7AI score0.00242EPSS
SaveExploits0References13
Rows per page
Query Builder