Openobserve vulnerabilities
Products
Newest
- openobserve OpenObserve: Unauthenticated /config/runtime endpoint exposes PostgreSQL database credentials 7.5 High
- openobserve OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_url 7.7 High
- openobserve OpenObserve's Invite Token Lifecycle Misconfiguration 8.4 High
- openobserve OpenObserve Vulnerable to HTML Injection in Organization Invitation Emails 3.5 Low
- openobserve OpenObserve Improper Authorization Allows Admin User to Remove Root User 8.7 High
- openobserve OpenObserve Cross-site Scripting (XSS) vulnerability in `openobserve/web/src/views/MemberSubscription.vue` 7.2 High
- openobserve OpenObserve stored XSS vulnerability may lead to complete account takeover 8.8 High
- openobserve OpenObserve Privilege Escalation Vulnerability in Users API 10.0 Critical
- openobserve OpenObserve Unauthorized Access Vulnerability in Users API 9.1 Critical