CVE-2019-19040
KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>' substring.
Published: 2019-11-17 · CVSS: Unscored
KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>' substring.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7