Spoofing originalUrl of snapshots

🗓️ 26 Jan 2023 00:00:00Reported by Grafana LabsType

Grafana snapshots spoofed originalUrl via query edits before 8.5.16 and 9.2.8; fixed.

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Cross Site Scripting in Grafana (CVE-2022-39324)	18 Jan 202414:20	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
AlmaLinux	Moderate: grafana security and enhancement update	7 Nov 202300:00	–	almalinux
BDU FSTEC	The vulnerability of the Grafana monitoring and observation platform lies in the improper handling of input during the creation of a web page. This allows a hacker to inject the entered URL address into the system.	5 Apr 202400:00	–	bdu_fstec
Chainguard	CVE-2022-39324 vulnerabilities	27 Jan 202323:15	–	cgr
Circl	CVE-2022-39324	28 Jan 202302:34	–	circl
CNNVD	Grafana 跨站脚本漏洞	27 Jan 202300:00	–	cnnvd
CVE	CVE-2022-39324	27 Jan 202322:42	–	cve
Cvelist	CVE-2022-39324 Grafana vulnerable to spoofing originalUrl of snapshots	27 Jan 202322:42	–	cvelist
FreeBSD	Grafana -- Spoofing originalUrl of snapshots	25 Jan 202300:00	–	freebsd