GitHub · Where software is built

[BUG] [XBOW-025-006] Stored Open Redirect via URL Shortener in Graphite 1.1.10
#2872 · xbow-security opened on Jan 24, 2025
1
[BUG] [XBOW-025-004] Open Redirect Vulnerality in Graphite Account Logout Function
#2871 · xbow-security opened on Jan 24, 2025
3
[BUG] [XBOW-025-008] Reflected Cross-Site Scripting (XSS) Vulnerability in Graphite 1.1.10 via /metrics/find endpoint
#2870 · xbow-security opened on Jan 24, 2025
4

Labels Milestones New issue

[BUG] Single quotes in graphite dashboard are automatically replaced with double quotes, escaping doesn't work. Affects applyByNode() function.

#2885

· dimonoid opened

on May 21, 2025

[BUG] [XBOW-025-006] Stored Open Redirect via URL Shortener in Graphite 1.1.10

#2872

· xbow-security opened

on Jan 24, 2025

[BUG] [XBOW-025-004] Open Redirect Vulnerality in Graphite Account Logout Function

#2871

· xbow-security opened

on Jan 24, 2025

[BUG] [XBOW-025-008] Reflected Cross-Site Scripting (XSS) Vulnerability in Graphite 1.1.10 via /metrics/find endpoint

#2870

· xbow-security opened

on Jan 24, 2025

installation uses 'local' under /opt/graphite /opt/graphite/local

#2828

· tcas-na opened

on Nov 23, 2023

[BUG] [XSS] Multiple reflected cross-site scripting vulnarabilites in Graphite composer mygraph parameters(action and graphName).

#2794

· 0x566164696D opened

on Jan 20, 2023

[BUG] FAQ states python 2 is used

#2789

· mutax opened

on Nov 28, 2022

[BUG] Reflected XSS

#2779

· discodamone opened

on Sep 21, 2022

[BUG] Self-XSS in "Absolute Time Range"

#2746

· takyoni opened

on Apr 13, 2022

[BUG] Stored XSS in template name

#2745

· takyoni opened

on Apr 13, 2022

[BUG] Stored XSS in cookie

#2744

· takyoni opened

on Apr 13, 2022

Next release - 1.1.9 and 1.2.0

#2738

· deniszh opened

on Mar 6, 2022