Zurück zur CVE-Übersicht
CVE-2026-33387
MEDIUM(4.6)CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Risk Signal Score12/100 — NIEDRIG
- CVSS 4.6 — Mittel
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.3%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
4.6
Technische Schwere
Beschreibung
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a malicious dashboard. When the victim views or imports the dashboard, the payload executes in their browser context, allowing the attacker to modify application data or disrupt application availability.