Graphite Project Graphite
7 CVEs affecting Graphite Project Graphite. Latest disclosed: 2022-12-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-18638 | High | 7.5 | 2019-10-11 | send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an at… |
CVE-2022-4730 | Low | 3.5 | 2022-12-27 | A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler… |
CVE-2022-4729 | Low | 3.5 | 2022-12-27 | A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The… |
CVE-2022-4728 | Low | 3.5 | 2022-12-27 | A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The mani… |
CVE-2013-5943 | | 2013-09-27 | Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vec… | |
CVE-2013-5942 | | 2013-09-27 | Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object… | |
CVE-2013-5093 | | 2013-09-27 | The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote at… |