high8.7
CVE-2026-45392
DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated …
Impact
DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated user who is tricked into visiting a crafted URL and interacting with the page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cribl | Cribl Stream | before 4.17.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.