Description
DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated user who is tricked into visiting a crafted URL and interacting with the page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cribl | Cribl Stream | < 4.17.1 | 4.17.1 |
References
- Cribl Stream 4.17.1 Security Fixes release-notes
- Cribl Trust Portal vendor-advisory