Description
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI.
Remediation
References
https://github.com/OpenTSDB/opentsdb/issues/1241
Related Vulnerabilities
CVE-2017-16143 Vulnerability in npm package commentapp.stetsonwood
CVE-2016-10596 Vulnerability in npm package imageoptim
CVE-2022-39202 Vulnerability in npm package matrix-appservice-irc
CVE-2022-28367 Vulnerability in maven package org.owasp:antisamy
CVE-2022-40955 Vulnerability in maven package org.apache.inlong:sort-connector-jdbc