← Vulnerability feed

Vulnerability record · CVE-2023-36812 · published 30 June 2023

CVE-2023-36812: Opentsdb injection vulnerability

Opentsdb · Opentsdb

OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit `07c4641471c` and further refined in commit `fa88d3e4b`. These patches are available in the `2.4.2` release. Users are advised to upgrade. User unable to upgrade may disable Gunuplot via the config option`tsd.core.enable_ui = true` and remove the shell files `mygnuplot.bat` and `mygnuplot.sh`.

9.8 CVSS 3.1 Critical EPSS 17% · top 3.1% CWE-74 · Injection
9.8CVSS 3.1 base score
17%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit `07c4641471c` and further refined in commit `fa88d3e4b`. These patches are available in the `2.4.2` release. Users are advised to upgrade. User unable to upgrade may disable Gunuplot via the config option`tsd.core.enable_ui = true` and remove the shell files `mygnuplot.bat` and `mygnuplot.sh`.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/174570/OpenTSDB-2.4.1-Unauthenticated-Command-Injection.html
https://github.com/OpenTSDB/opentsdb/commit/07c4641471c6f5c2ab5aab615969e97211eb50d9 Patch
https://github.com/OpenTSDB/opentsdb/commit/fa88d3e4b5369f9fb73da384fab0b23e246309ba Patch
https://github.com/OpenTSDB/opentsdb/security/advisories/GHSA-76f7-9v52-v2fw Patch
http://packetstormsecurity.com/files/174570/OpenTSDB-2.4.1-Unauthenticated-Command-Injection.html
https://github.com/OpenTSDB/opentsdb/commit/07c4641471c6f5c2ab5aab615969e97211eb50d9 Patch
https://github.com/OpenTSDB/opentsdb/commit/fa88d3e4b5369f9fb73da384fab0b23e246309ba Patch
https://github.com/OpenTSDB/opentsdb/security/advisories/GHSA-76f7-9v52-v2fw Patch

Track CVE-2023-36812 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-25826Opentsdb os command injection vulnerabilityDue to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple paramete…EPSS 43%9.8CVE-2020-35476OpenTSDB yrange parameter command injection enables remote code executionOpenTSDB through 2.4.0 writes the user-supplied yrange parameter into a gnuplot file under /tmp, which is then executed by the mygnuplot.sh shell scr…EPSS 85%analysed9.8CVE-2018-12972Opentsdb os command injection vulnerabilityAn issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and th…EPSS 2.2%6.1CVE-2023-25827Opentsdb cross-site scripting vulnerabilityDue to insufficient validation of parameters reflected in error messages by the legacy HTTP query API and the logging endpoint, it is possible to inj…EPSS 0.90%6.1CVE-2018-13003Opentsdb cross-site scripting vulnerabilityAn issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'type' to the /suggest URI.EPSS 0.67%6.1CVE-2018-12973Opentsdb cross-site scripting vulnerabilityAn issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI.EPSS 0.84%10.0CVE-2025-20337Cisco ISE API input validation flaw allows unauthenticated root RCECisco ISE and ISE-PIC fail to properly validate user-supplied input in a specific API, letting an unauthenticated remote attacker execute arbitrary c…KEVEPSS 68%analysed10.0CVE-2025-20281Cisco ISE API unauthenticated remote code executionCisco ISE and ISE-PIC fail to properly validate user-supplied input in a specific API, allowing a crafted request to reach the underlying operating s…KEVEPSS 98%analysed

Source: NIST National Vulnerability Database (record CVE-2023-36812), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.