CVE-2019-19040 | BDVDB-2026-126205 Detail

Description#

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>' substring.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/kairosdb/kairosdb/issues/569

Exploit#

No public exploit known

History#

Version 12019-11-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.