CVE-2023-36656

MediumCVSS 5.4

Published: 17/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.98%

58th percentile - higher than 58% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component.

Risk Assessment

An attacker could exploit this vulnerability to take control of the application, potentially leading to data theft or malicious actions in the user's context.

Recommendation

It is recommended to upgrade Jaeger UI to version 1.31.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component.