Grafana XSS via a query alias for the ElasticSearch datasource

🗓️ 24 May 2022 17:32:32Reported by GitHub Advisory DatabaseType

Grafana XSS vulnerability in ElasticSearch datasourc

Reporter	Title	Published	Views	Family All 23
Veracode	Cross-site Scripting (XSS)	29 Oct 202002:12	–	veracode
Cvelist	CVE-2020-24303	28 Oct 202013:25	–	cvelist
Prion	Design/Logic Flaw	28 Oct 202014:15	–	prion
OpenVAS	Grafana < 7.1.0-beta1 XSS Vulnerability	29 Oct 202000:00	–	openvas
UbuntuCve	CVE-2020-24303	28 Oct 202000:00	–	ubuntucve
RedhatCVE	CVE-2020-24303	28 Oct 202018:26	–	redhatcve
OSV	CVE-2020-24303	28 Oct 202014:15	–	osv
OSV	Grafana XSS via a query alias for the ElasticSearch datasource	24 May 202217:32	–	osv
OSV	BIT-grafana-2020-24303	6 Mar 202411:00	–	osv
OSV	Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana	28 Jun 202415:28	–	osv

Vulners

Node

grafana grafanaRange<7.1.0-beta1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-24303
github	www.github.com/grafana/grafana/pull/25401
github	www.github.com/grafana/grafana/blob/master/CHANGELOG.md
security	www.security.netapp.com/advisory/ntap-20201123-0002
github	www.github.com/advisories/GHSA-mvpr-q6rh-8vrp

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2022 17:32Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.001

CWE-79