Back to bug 2225167

Who When What Removed Added
Marian Rehak 2023-07-24 13:07:03 UTC Blocks 2225169
Marian Rehak 2023-07-24 13:11:27 UTC Depends On 2225172, 2225173
Marian Rehak 2023-08-02 10:24:57 UTC Summary TRIAGE-CVE-2023-36656 jaeger-ui: xss allows an attacker to perform arbitrary jaeger queries and exfiltrate returned data CVE-2023-36656 TRIAGE-CVE-2023-36656 jaeger-ui: xss allows an attacker to perform arbitrary jaeger queries and exfiltrate returned data
Alias TRIAGE-CVE-2023-36656 CVE-2023-36656
Doc Text A flaw was found in the jaeger-ui package. A Cross Site Scripting vulnerability allows a remote attacker to execute arbitrary code via the KeyValuesTable component.
RaTasha Tillery-Smith 2023-08-02 13:05:59 UTC Doc Text A flaw was found in the jaeger-ui package. A Cross Site Scripting vulnerability allows a remote attacker to execute arbitrary code via the KeyValuesTable component. A flaw was found in the jaeger-ui package. A Cross-site scripting vulnerability allows a remote attacker to execute arbitrary code via the KeyValuesTable component.
Product Security DevOps Team 2023-08-02 15:00:51 UTC Resolution --- NOTABUG
Status NEW CLOSED
Last Closed 2023-08-02 15:00:51 UTC

Back to bug 2225167