6.5
CVSS V3
A stored XSS in jaeger UI might allow an attacker who controls a trace to perform arbitrary jaeger queries
Related UI vulnerability advisory: https://github.com/jaegertracing/jaeger-ui/security/advisories/GHSA-vv24-rm95-q56r
Jaeger UI is using the json-markup
dependency to display span attributes and resources. This dependency is not sanitising keys of an object though, thus the KeyValuesTable
is vulnerable to XSS.
The vulnerable line is here: https://github.com/jaegertracing/jaeger-ui/blob/main/packages/jaeger-ui/src/components/TracePage/TraceTimelineViewer/SpanDetail/KeyValuesTable.tsx#L49
This is a XSS on Jaeger UI. XSS can be used to run JavaScript.