Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Graphite Component: Graphite Clear all filters
TI-2022-04325 CVE-2022-4729 · GHSA-q99p-78hp-xg5c

Graphite Web Template Name cross site scripting

Priority HIGH 66

A vulnerability was found in Graphite Web and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00789 Published 2022-12-24 Will not fix CWE-707
TI-2022-04324 CVE-2022-4728 · GHSA-3c5x-4hvx-qrrr

Graphite Web Cookie cross site scripting

Priority HIGH 66

A vulnerability has been found in Graphite Web and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00823 Published 2022-12-24 Will not fix CWE-707
TI-2013-05065 CVE-2013-5942 · GHSA-ch3j-w953-hfcm

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote…

Priority LOW 34

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) storage.py, (3) render/…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02106 Published 2013-09-27 Fixed in 0.9.11 CWE-94
TI-2013-04426 CVE-2013-5093 · GHSA-m923-w2gj-v43g

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through…

Priority MEDIUM 57

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized ob…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.3881 Published 2013-09-27 Fixed in 0.9.11 CWE-94