dashboard.scoot.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-630506 Description| Value ---|--- Affected Website:| dashboard.scoot.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Grafana Cross-Site Scripting Vulnerability

Grafana is a set of open source monitoring tools that provide a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus and so on. A cross-site scripting vulnerability exists in the dashboard links in versions prior to Grafana 5.2.0-beta1. A...

CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

UBUNTU-CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

Cross site scripting

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2018-12099

Grafana prior to 5.2.0-beta1 is affected by XSS in dashboard links (CVE-2018-12099). The issue stems from an incomplete fix, with later Nessus entries noting unpatched vectors in Grafana 5.3.1 related to this CVE. Remediation: upgrade to Grafana 5.2.0-beta1 or newer where the fix is included.

CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2018-12099: Improper Neutralization of Input During Web Page Generation

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

PT-2018-11012

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 5.2.0-beta1 Description The issue concerns Cross-site Scripting XSS vulnerabilities found in dashboard links. This allows for potential malicious script execution. Recommendations For versions prior to 5.2.0-beta1,...

Graylog cross-site scripting vulnerability (CNVD-2018-11028)

Graylog is an open source log storage system , it supports the system log syslog saved to MongoDB distributed document storage database. A cross-site scripting vulnerability exists in the dashboard name in versions of Graylog prior to 2.4.4. A remote attacker can exploit this vulnerability to...

CVE-2018-11651

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...

Cross site scripting

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...

CVE-2018-11651

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...

CVE-2018-11651

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...

CVE-2018-11651

Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...

CVE-2018-11651

Graylog before v2.4.4 is affected by an XSS vulnerability due to unescaped text in dashboard names, specifically in dashboard-related UI components (Dashboard.jsx, EditDashboardModal.jsx) and ShowDashboardPage.jsx. The issue enables script execution when dashboard names contain malicious content....

PT-2018-10732

Name of the Vulnerable Software and Affected Versions Graylog versions prior to 2.4.4 Description The issue is related to an XSS security problem with unescaped text in dashboard names. It affects components such as components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx,...