Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-20933 2 Debian, Influxdata 2 Debian Linux, Influxdb 2024-11-21 9.8 Critical
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).
CVE-2018-17572 1 Influxdata 1 Influxdb 2024-11-21 4.8 Medium
InfluxDB 0.9.5 has Reflected XSS in the Write Data module.