2 matches found
CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
8.7CVSS6.6AI score0.00518EPSS
SaveExploits0References4
EUVD-2026-64129
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
8.7CVSS5.9AI score0.00518EPSS
SaveExploits0References4
20