Read the docs

Graphite

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Graphite records in CISA KEV

No Graphite vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Graphite 7 records HIGH

Records

7 records in Graphite · all components

TI-2022-04325 CVE-2022-4729 · GHSA-q99p-78hp-xg5c

Graphite Web Template Name cross site scripting

Priority HIGH 66

A vulnerability was found in Graphite Web and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00789 Published 2022-12-24 Will not fix CWE-707
TI-2022-04324 CVE-2022-4728 · GHSA-3c5x-4hvx-qrrr

Graphite Web Cookie cross site scripting

Priority HIGH 66

A vulnerability has been found in Graphite Web and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00823 Published 2022-12-24 Will not fix CWE-707
TI-2013-04426 CVE-2013-5093 · GHSA-m923-w2gj-v43g

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through…

Priority MEDIUM 57

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized ob…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.3881 Published 2013-09-27 Fixed in 0.9.11 CWE-94
TI-2013-05065 CVE-2013-5942 · GHSA-ch3j-w953-hfcm

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote…

Priority LOW 34

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) storage.py, (3) render/…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02106 Published 2013-09-27 Fixed in 0.9.11 CWE-94
Open these records in search →