CVE-2022-23552
mediumpriority · track · 22EPSS 0.008 · 56 %ileDEEURUUSEPSS · scored 2026-10-27
Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16, 9.2.10, and 9.3.4, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. The stored XSS vulnerability was possible because SVG files weren't properly sanitized and allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance. An attacker needs to have the Editor role in order to change a panel to include either an external URL to a SVG-file containing JavaScript, or use the `data:` scheme to load an inline SVG-file containing JavaScript. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. Users may upgrade to version 8.5.16, 9.2.10, or 9.3.4 to receive a fix.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.3
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (17)
Products and version ranges known to be affected.
- Hitachi Ops Center < Analyzer 10.9.3-00all versionscert_bundDEcpe:/a:hitachi:ops_center:analyzer_10.9.3-00
- Hitachi Ops Center < Viewpoint 10.9.3-00all versionscert_bundDEcpe:/a:hitachi:ops_center:viewpoint_10.9.3-00
advisories (2)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2023-0202Grafana: Mehrere SchwachstellenDeutsch2023-01-25csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen falsch darzustellen und seine Privilegien zu erweitern.
- BIT-grafana-2022-23552Grafana stored XSS in FileUploader component 2024-03-06vendor · osvUS
Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16, 9.2.10, and 9.3.4, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. The stored XSS vulnerability was possible because SVG files weren't properly sanitized and allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance. An attacker needs to have the Editor role in order to change a panel to include either an external URL to a SVG-file containing JavaScript, or use the `data:` scheme to load an inline SVG-file containing JavaScript. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. Users may upgrade to version 8.5.16, 9.2.10, or 9.3.4 to receive a fix.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (19)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2022-23552cnnvd
- https://cxsecurity.com/cveshow/CVE-2022-23552/cnnvd
- https://github.com/grafana/grafana/commit/1c8a50b36973bd59a1cc5f34c30de8a9a6a431f0cnnvd
- https://github.com/grafana/grafana/commit/8b574e22b53aa4c5a35032a58844fd4aaaa12f5fcnnvd
- https://github.com/grafana/grafana/commit/c022534e3848a5d45c0b3face23b43aa44e4400acnnvd
- https://github.com/grafana/grafana/pull/62143cnnvd
- https://github.com/grafana/grafana/security/advisories/GHSA-8xmm-x63g-f6xvcnnvd
- https://www.auscert.org.au/bulletins/ESB-2024.0469cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan