Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| graphite_project / graphite | - | 0.9.10.x |
| graphite_project / graphite | 0.9.8 | 0.9.8.x |
| graphite_project / graphite | 0.9.5 | 0.9.5.x |
| graphite_project / graphite | 0.9.2 | 0.9.2.x |
| graphite_project / graphite | 0.9.3 | 0.9.3.x |
| graphite_project / graphite | 0.9.7 | 0.9.7.x |
| graphite_project / graphite | 0.9.4 | 0.9.4.x |
| graphite_project / graphite | 0.9.6 | 0.9.6.x |
| graphite_project / graphite | 0.9.9 | 0.9.9.x |