CVE-2024-41809: OpenObserve Cross-site Scripting (XSS) vulnerability in `openobserve/web/src/views/MemberSubscription.vue`
OpenObserve is an open-source observability platform. Starting in version 0.4.4 and prior to version 0.10.0, OpenObserve contains a cross-site scripting vulnerability in line 32 of openobserve/web/src/views/MemberSubscription.vue. Version 0.10.0 sanitizes incoming html.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41809?
CVE-2024-41809 is classified as a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2024-41809?
To fix CVE-2024-41809, upgrade OpenObserve to version 0.10.0 or later, which includes sanitization for incoming HTML.
Which versions are affected by CVE-2024-41809?
CVE-2024-41809 affects OpenObserve versions from 0.4.4 up to, but not including, 0.10.0.
What type of vulnerability is CVE-2024-41809?
CVE-2024-41809 is a cross-site scripting (XSS) vulnerability that can affect the security of web applications.
Where does CVE-2024-41809 occur in OpenObserve?
CVE-2024-41809 is found in the file `openobserve/web/src/views/MemberSubscription.vue` on line 32.