cbcvebase.

Taosdata Grafanaplugin vulnerabilities

1 known vulnerability affecting taosdata/grafanaplugin.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-34111P2CRITICALCVSS 9.8≤ 2e4c82b0022023-06-06
CVE-2023-34111 [CRITICAL] CWE-20 CVE-2023-34111: The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command i The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of `${{ github.event.pull_request.title }}` in a bash command within the GitHub workflow. Attackers can inject malicious comma
nvd
Taosdata Grafanaplugin vulnerabilities | cvebase