Vulnerabilidades de Arangodb

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Arangodb: 1 registro(s), com severidade, exploração e correções.

ArangoDB Community Edition 1

Somente exploradas (KEV) →

CVE-2019-25367 Média · 5.4 CWE-79 15/02/2026

ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/aardvark/index.html to execute JavaScript in authenticated users' browsers.