Skip to content
OpenAdvisories

Vendor

Arangodb

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface

    ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/…