CVE-2013-5943
graphite project graphite: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days. Fixed in graphite-web 0.9.11.
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- graphite_project:graphite
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| PYSEC-2013-4 | PyPI | graphite-web | <0.9.11 | 0.9.11 |