Lucene search
+L

Grafana Cross-Site Scripting Vulnerability (CNVD-2020-36524)

🗓️ 03 Jun 2020 00:00:00Reported by China National Vulnerability DatabaseType 
cnvd
 cnvd
🔗 www.cnvd.org.cn👁 8 Views

Grafana version 5.3.1 has a cross-site scripting vulnerability due to improper validation, enabling an attacker to execute client-side code.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2018-18625
2 Jun 202020:55
circl
cve
CVE
CVE-2018-18625
2 Jun 202016:41
cve
cvelist
Cvelist
CVE-2018-18625
2 Jun 202016:41
cvelist
euvd
EUVD
EUVD-2024-0278
3 Oct 202520:07
euvd
github
Github Security Blog
Grafana XSS via adding a link in General feature
30 Jan 202423:47
github
nvd
NVD
CVE-2018-18625
2 Jun 202017:15
nvd
openvas
OpenVAS
Grafana <= 6.0.0 Multiple XSS Vulnerabilities
28 Dec 202200:00
openvas
osv
OSV
ECHO-E2C1-B758-80FD
24 Nov 202510:19
osv
osv
OSV
GHSA-6WH2-8HW7-JW94 Grafana XSS via adding a link in General feature
30 Jan 202423:47
osv
osv
OSV
GO-2024-2483 Grafana XSS via adding a link in General feature in github.com/grafana/grafana
28 Jun 202415:28
osv
Rows per page
Vulners
Node
grafanagrafanaMatch5.3.1

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 Jul 2020 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS 24.3
CVSS 3.16.1
EPSS0.01192
8