Approved changes feed: RSS · Atom
cpe:2.3:a:kitabisa:teler:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kitabisa (c8244437-43b8-5c0f-9fb6-514086409f2f) |
|---|---|
| Product | Teler (1454ba1b-edff-5aa1-b5b4-b6e1c4cae34e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23466 |
vulnerable | 2026-06-08 05:40:57.586992 |
DOM-based cross-site scripting (XSS) in teler dashboard
MEDIUM (5.4)
teler is an real-time intrusion detection and threat alert dashboard. teler prior to version 2.0.0-rc.4 is vulnerable to DOM-based cross-site scripting (XSS) in the teler dashboard. When teler requests messages from the event stream on the `/events` endpoint, the log data displayed on the dashboard are not sanitized. This only affects authenticated users and can only be exploited based on detected threats if the log contains a DOM scripting payload. This vulnerability has been fixed on version `v2.0.0-rc.4`. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published: 2022-12-06T17:58:52.867Z
Updated: 2025-04-23T16:32:01.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26213 |
vulnerable | 2026-06-08 05:23:50.846866 |
Denial of Service in teler
MEDIUM (5.9)
In teler before version 0.0.1, if you run teler inside a Docker container and encounter `errors.Exit` function, it will cause denial-of-service (`SIGSEGV`) because it doesn't get process ID and process group ID of teler properly to kills. The issue is patched in teler 0.0.1 and 0.0.1-dev5.1.
Published: 2020-11-06T16:45:14.000Z
Updated: 2024-08-04T15:49:07.177Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.