weaveworks

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

weaveworks records in CISA KEV

No weaveworks vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Gitops · all components

TI-2022-18289 CVE-2022-38790 · GHSA-69f5-4grj-mqr7

LOW 26

Weave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a malicious user to inject a javascript: link in the UI.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00837 Published 2022-09-01 No fix listed CWE-79