Unscored CVE-2023-36656 EUVD-2023-40600

Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via …

Published Jul 17, 2023 · Updated Oct 30, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component.

References

https://github.com/jaegertracing/jaeger-ui/pull/1498
https://github.com/mafintosh/json-markup/pull/15
https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r