Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: OpenTSDB Component: Opentsdb Clear all filters
TI-2023-18606 CVE-2023-36812 · GHSA-76f7-9v52-v2fw

Remote Code Execution in OpenTSDB

Priority HIGH 65

OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16501 Published 2023-06-30 Fixed in 2.4.2 CWE-74
TI-2023-11097 CVE-2023-25827 · GHSA-9chv-3w6c-jq9w

Cross-site Scripting in OpenTSDB

Priority LOW 37

Due to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging endpoint, it is possible to inject and execute malicious JavaScript within the browser of a targeted O…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00904 Published 2023-05-03 No fix listed CWE-79
TI-2023-11096 CVE-2023-25826 · GHSA-h475-7v3c-26q7

Remote Code Execution in OpenTSDB

Priority HIGH 82

Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.43036 Published 2023-05-03 No fix listed CWE-78
TI-2018-09308 CVE-2018-12972 · GHSA-cx2v-jrjc-g54w

An issue was discovered in OpenTSDB 2.3.0.

Priority MEDIUM 46

An issue was discovered in OpenTSDB 2.3.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02211 Published 2018-06-29 No fix listed CWE-78