GHSA-6wh2-8hw7-jw94MediumCVSS 6.1

Grafana XSS via adding a link in General feature

Published
January 30, 2024
Last Modified
January 30, 2024

🔗 CVE IDs covered (1)

CVE-2018-18625 →

📋 Description

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

🎯 Affected products1

  • go/github.com/grafana/grafana:< 6.0.0-beta1

🔗 References (5)