Read the docs
TI-2024-17964 Aliases CVE-2024-27103

Querybook Stored Cross-Site Scripting allows Privilege Elevation

Priority LOW 27CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Querybook is a Big Data Querying UI. When a user searches for their queries, datadocs, tables and lists, the search result is marked and highlighted, and this feature uses dangerouslySetInnerHTML which means that if the highlighted result has an XSS payload it will trigger. While the input to dangerouslySetInnerHTML is not sanitized for the data inside of queries which leads to an XSS vulnerability. During the "query auto-suggestion" the name of the suggested tables are set with innerHTML which leads to the XSS vulnerability. A patch to rectify this issue has been introduced in Querybook version 3.31.2.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00355 29th percentileScored 2026-11-07
Fix Fixed querybook (pinterest): 3.31.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
pinterestquerybookbefore 3.31.13.31.1Patch availableCNA
  • querybook Vendorpinterest Affected before 3.31.1 Fixed in 3.31.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pinterest:querybook:*:*:*:*:*:*:*:*before 3.31.2Vulnerablepinterest
  • cpe:2.3:a:pinterest:querybook:*:*:*:*:*:*:*:* Versions before 3.31.2 Vulnerable ·pinterest

Remediation

  • Fix · CNA querybook (pinterest) Fixed in 3.31.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-27103

References

Patch 2

  • TI-2024-17238 Querybook's Stored Cross-Site Scripting vulnerability allows Privilege Elevation CVSS 3.1MEDIUM 6.1
  • TI-2024-18810 Cross-site websocket hijacking in Querybook CVSS 3.1HIGH 7.3
  • TI-2022-22795 Reflected XSS in pinterest querybook CVSS 3.1MEDIUM 6.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences