Description
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.opentsdb:opentsdb | <= 2.3.0 | — | GHSA-r68m-wq3x-2hqw |
Medium · 6.1
CVE-2018-12973
EUVD-2022-5110GHSA-r68m-wq3x-2hqw
OpenTSDB Cross-site Scripting vulnerability
Published Jun 29, 2018 · Updated Aug 5, 2024 · Assigned by mitre