Skip to content
OpenAdvisories

Package · Go

github.com/jaegertracing/jaeger

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    GHSA-2w8w-qhg4-f78j

    A stored XSS in jaeger UI might allow an attacker who controls a trace to perform arbitrary jaeger queries

    Related UI vulnerability advisory: https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r ### Summary Jaeger UI is using the `json-markup` dependency to display span attributes and resources. This dependency is not sanitising keys …

    github.com/jaegertracing/jaeger Go
  • High 7.1
    CVE-2020-10750

    Information Exposure in jaeger

    Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials.

    the Jager project jaegertracing/jaeger github.com/jaegertracing/jaeger Go