HIGH🇵🇱 Wersja polska

CVE-2024-41809

CVSS 7.2v3.1pub. 2024-07-25upd. 2024-11-21

OpenObserve is an open-source observability platform. Starting in version 0.4.4 and prior to version 0.10.0, OpenObserve contains a cross-site scripting vulnerability in line 32 of `openobserve/web/src/views/MemberSubscription.vue`. Version 0.10.0 sanitizes incoming html.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

  • Openobserve

    APP
    Openobserve
    0.4.4 – 0.10.0 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2024-24830CRITICAL9.9PL ✓ten sam produkt

OpenObserve: privilege escalation przez endpoint dodawania użytkowników

CVE-2024-25106CRITICAL9.1PL ✓ten sam produkt

OpenObserve: nieautoryzowane usuwanie użytkowników przez dowolnego członka organizacji

CVE-2026-39361HIGH7.7ten sam produkt

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate_enrichment_url funct...

CVE-2024-41808HIGH8.8ten sam produkt

The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the v...