Teler Project Teler 2.0.0 Release Candidate 2
Approved changes feed: RSS · Atom
cpe:2.3:a:teler_project:teler:2.0.0:rc2:*:*:*:*:*:*part: a version: 2.0.0 update: rc2
| Vendor | Teler Project (b6f6c8f9-cfad-5cc6-9592-333621962abb) |
|---|---|
| Product | Teler (eb6dd385-afe8-5d17-b879-7f085f9840b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kitabisa/teler |
purl2cpe | 2026-06-01 10:12:25.957544 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23466 |
vulnerable | 2026-06-08 05:40:57.589189 |
DOM-based cross-site scripting (XSS) in teler dashboard
MEDIUM (5.4)
teler is an real-time intrusion detection and threat alert dashboard. teler prior to version 2.0.0-rc.4 is vulnerable to DOM-based cross-site scripting (XSS) in the teler dashboard. When teler requests messages from the event stream on the `/events` endpoint, the log data displayed on the dashboard are not sanitized. This only affects authenticated users and can only be exploited based on detected threats if the log contains a DOM scripting payload. This vulnerability has been fixed on version `v2.0.0-rc.4`. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published: 2022-12-06T17:58:52.867Z
Updated: 2025-04-23T16:32:01.139Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.