OpenTSDB vulnerabilities
We track 2 vulnerabilities in OpenTSDB products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 30, 2023.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest OpenTSDB vulnerabilities
- 9.8 Critical severity
opentsdb: Improper Neutralization of Special Elements in Output Used by a Downstream Component
OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. Thi
- 9.8 Critical severity
OpenTSDB: Improper Neutralization of Special Elements used in an OS Command
Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. This exploit exists due to an incomplete fix that wa