Package · Debian

influxdb

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Unscored —

CVE-2022-36640

influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers…

influxdb Debian

Sep 2, 2022
Critical 9.8

CVE-2019-20933 Public exploit EPSS 32%

Improper Authentication in InfluxDB

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

influxdb github.com/influxdata/influxdb influxdb Debian Ubuntu Go

Nov 19, 2020
Medium 4.8

CVE-2018-17572

InfluxDB Reflected Cross-site Scripting

InfluxDB 0.9.5 has Reflected XSS in the Write Data module.

influxdb github.com/influxdata/influxdb Debian Go

Mar 2, 2020