-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| net.opentsdb:opentsdb | maven | <= 2.4.1 |
JavaJavaMiggo AIRoot Cause AnalysisThe vulnerability stems from unescaped parameter reflection in error handlers for both the legacy query API (/q) and logging endpoint (/logs). The pull request #2274 specifically addresses XSS in query parameters by adding HTML escaping, indicating these were the vulnerable entry points. The logging endpoint's 'level' parameter is explicitly mentioned in advisory descriptions as another injection vector. Both endpoints share the same root cause pattern as CVE-2018-13003 - reflecting user input in error messages without proper sanitization.
Ongoing coverage of React2Shell