📦 Openobserve

This vulnerability allows any authenticated regular user in OpenObserve to create new users with administrative 'root' privileges, bypassing intended role-based access controls. It leads to unauthoriz...

OpenObserve versions 0.4.4 through 0.9.x contain a cross-site scripting (XSS) vulnerability in the MemberSubscription.vue component. This allows attackers to inject malicious scripts that execute in u...

CVE-2024-41808 is a cross-site scripting (XSS) vulnerability in OpenObserve's dashboard filter selection menu that allows complete account takeover. All OpenObserve users through version 0.9.1 are aff...