2 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-41117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious...
6.8CVSS5.4AI score0.00239EPSS
SaveExploits0References3
CVE-2025-41117 XSS in Grafana Explore stack trace
Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...
6.8CVSS5.5AI score0.00239EPSS
SaveExploits0References1
20