Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-1410HistoryMar 23, 2023 - 8:15 a.m.
CVE-2023-1410
2023-03-2308:15:00
Alpine Linux Development Team
security.alpinelinux.org
4
grafana
monitoring
xss
vulnerability
graphite
function description
data source
upgrade
fix
0.001 Low
EPSS
Percentile
26.7%
Grafana is an open-source platform for monitoring and observability.
Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip.
The stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized.
An attacker needs to have control over the Graphite data source in order to manipulate a function description and a Grafana admin needs to configure the data source, later a Grafana user needs to select a tampered function and hover over the description.
Users may upgrade to version 8.5.22, 9.2.15 and 9.3.11 to receive a fix.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.17-community | noarch | grafana | = 9.2.5-r4 | UNKNOWN |
Related
freebsd
freebsd
Grafana -- Stored XSS in Graphite FunctionDescription tooltip
2023-03-14 00:00:00
osv
osv
CVE-2023-1410
2023-03-23 08:15:12
BIT-grafana-2023-1410
2024-03-06 10:53:49
Grafana Stored Cross-site Scripting in Graphite FunctionDescription tooltip
2023-03-23 20:10:47
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Grafana (CVE-2023-1410)
2024-01-26 22:03:33
openvas
openvas
Grafana < 8.5.22, 9.2.x < 9.2.15, 9.3.x < 9.3.11, 9.4.x < 9.4.7 XSS Vulnerability (GHSA-qrrg-gw7w-vp76)
2023-03-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2578-1)
2023-06-22 00:00:00
cve
cve
CVE-2023-1410
2023-03-23 08:15:12
github
github
Grafana Stored Cross-site Scripting in Graphite FunctionDescription tooltip
2023-03-23 20:10:47
nvd
nvd
CVE-2023-1410
2023-03-23 08:15:12
veracode
veracode
Stored Cross-Site Scripting (XSS)
2023-03-24 02:11:18
prion
prion
Cross site scripting
2023-03-23 08:15:00
cvelist
cvelist
CVE-2023-1410 Stored XSS in Graphite FunctionDescription tooltip
2023-03-23 07:48:56
ubuntucve
ubuntucve
CVE-2023-1410
2023-03-23 00:00:00
redhatcve
redhatcve
CVE-2023-1410
2023-03-24 13:07:22
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2023:1904-1)
2023-04-20 00:00:00
RHEL 9 : grafana (Unpatched Vulnerability)
2024-06-03 00:00:00
redos
redos
ROS-20240403-01
2024-04-03 00:00:00
redhat
redhat