Description
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI.
Remediation
References
https://github.com/OpenTSDB/opentsdb/issues/1241
Related Vulnerabilities
CVE-2019-1003097 Vulnerability in maven package com.ds.tools.hudson:crowd
CVE-2015-7940 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk14
CVE-2022-24846 Vulnerability in maven package org.geowebcache:gwc-diskquota-jdbc
CVE-2015-9242 Vulnerability in npm package ecstatic
CVE-2020-35210 Vulnerability in maven package io.atomix:atomix