EUVD-2023-40600

Malicious code in bioql PyPI...

CVE-2023-36656

A flaw was found in the jaeger-ui package. A Cross-site scripting vulnerability allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

CVE-2023-36656

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

CVE-2023-36656

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

CVE-2023-36656

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

Cross site scripting

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

CVE-2023-36656

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

CVE-2023-36656

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

CVE-2023-36656

CVE-2023-36656 affects Jaeger UI prior to version 1.31.0. The issue is a Cross-Site Scripting (XSS) vulnerability in the KeyValuesTable component that can allow a remote attacker to execute arbitrary code in a victim’s browser. Affected software: Jaeger UI. Root cause: unsanitized input handling ...

Cross-Site Scripting (XSS)

github.com/jaegertracing/jaeger and gloo-jaeger-ui are vulnerable to Cross-Site Scripting XSS attacks. The vulnerability is triggered when rendering key-value tables in jaeger UI using the KeyValuesTable component, which allows an attacker to inject and execute malicious javascript on a victim's...

GHSA-2W8W-QHG4-F78J A stored XSS in jaeger UI might allow an attacker who controls a trace to perform arbitrary jaeger queries

Related UI vulnerability advisory: https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r Summary Jaeger UI is using the json-markup dependency to display span attributes and resources. This dependency is not sanitising keys of an object though, thus the KeyValuesTable...