CVE-2019-19040

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>'…

published November 17, 2019

CVSS
—
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>' substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00857 · 58.0th percentile
Published
2019-11-17T20:20Z
EPSS history
Timeline
  • 17 NOV 20:20Z
    KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>'…
    cvelistv5