Описание
OpenObserve is an open-source observability platform. Starting in version 0.4.4 and prior to version 0.10.0, OpenObserve contains a cross-site scripting vulnerability in line 32 of openobserve/web/src/views/MemberSubscription.vue. Version 0.10.0 sanitizes incoming html.
Ссылки
- Product
- Patch
- Patch
- Third Party Advisory
- Product
- Patch
- Patch
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.4.4 (включая) до 0.10.0 (исключая)
cpe:2.3:a:openobserve:openobserve:*:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.0037
Низкий
7.2 High
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79
CWE-79
EPSS
Процентиль: 58%
0.0037
Низкий
7.2 High
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79
CWE-79