What’s Vulnerable › Vulnerabilities
CVE-2019-19040
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-11-17 · updated 2026-06-17
- Weakness: CWE-79
Description
KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>' substring.
Affected products
- Kairosdb Project Kairosdb: through 1.2.2
References
Get alerted when CVE-2019-19040 or the next vulnerability affects your stack