TI-2022-04326 CVE-2022-4730 · GHSA-m973-4vpc-x43c
Graphite Web Absolute Time Range cross site scripting
Priority HIGH 66
A vulnerability was found in Graphite Web.
Graphite
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Graphite records in CISA KEVNo Graphite vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2022-04325 CVE-2022-4729 · GHSA-q99p-78hp-xg5c
Graphite Web Template Name cross site scripting
Priority HIGH 66
A vulnerability was found in Graphite Web and classified as problematic.
TI-2022-04324 CVE-2022-4728 · GHSA-3c5x-4hvx-qrrr
Graphite Web Cookie cross site scripting
Priority HIGH 66
A vulnerability has been found in Graphite Web and classified as problematic.
TI-2013-04426 CVE-2013-5093 · GHSA-m923-w2gj-v43g
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through…
Priority MEDIUM 57
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized ob…
TI-2017-13792 CVE-2017-18638 · GHSA-vfj6-275q-4pvm
send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is…
Priority MEDIUM 49
send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF.
TI-2013-05065 CVE-2013-5942 · GHSA-ch3j-w953-hfcm
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote…
Priority LOW 34
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) storage.py, (3) render/…
TI-2026-37304 CVE-2026-50593 · GHSA-3mqg-485v-x9g7
Integer underflow in Graphite
Priority LOW 31
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.
TI-2013-05066 CVE-2013-5943 · GHSA-jqjf-6p78-286m
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.