GO-2024-2483

vendorUSosv

Grafana XSS via adding a link in General feature in github.com/grafana/grafana

view advisory published 2024-06-28Licence: per source

Grafana XSS via adding a link in General feature in github.com/grafana/grafana

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-18625USmedium6.1—
Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan