NetData <= 1.13.0 HTML Injection Vulnerability

NetData is prone to an HTML injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:my-netdata:netdata";...

CVE-2019-9834

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to...

CVE-2019-9834

The CVE-2019-9834 issue affects the Netdata web application up to version 1.13.0, where an HTML Injection flaw allows remote attackers to inject attacker-supplied HTML into an imported snapshot. This can execute in the user’s browser context, potentially stealing authentication credentials or alt...