medium5.4
CVE-2023-36656
Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable c…
Impact
Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jaegertracing | Jaeger Ui | before 1.31.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/jaegertracing/jaeger-ui/pull/1498
- https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r
- https://github.com/mafintosh/json-markup/pull/15
- https://github.com/jaegertracing/jaeger-ui/pull/1498
- https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r
- https://github.com/mafintosh/json-markup/pull/15