Lucene search

CVE-2023-22462

🗓️ 02 Mar 2023 01:11:15Reported by [email protected]Type

Grafana XSS vulnerability allows vertical privilege escalatio

Reporter	Title	Published	Views	Family All 25
UbuntuCve	CVE-2023-22462	2 Mar 202300:00	–	ubuntucve
Cvelist	CVE-2023-22462 Stored XSS in Grafana Text plugin	2 Mar 202300:06	–	cvelist
Tenable Nessus	FreeBSD : Grafana -- Stored XSS in text panel plugin (6dccc186-b824-11ed-b695-6c3be5272acd)	3 Mar 202300:00	–	nessus
Tenable Nessus	FreeBSD : Grafana -- Stored XSS in TraceView panel (e7841611-b808-11ed-b695-6c3be5272acd)	6 Nov 202300:00	–	nessus
Tenable Nessus	FreeBSD : Grafana -- Stored XSS in geomap panel plugin via attribution (e2a8e2bd-b808-11ed-b695-6c3be5272acd)	3 Mar 202300:00	–	nessus
Tenable Nessus	RHEL 9 : grafana (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 8 : grafana (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Vulnrichment	CVE-2023-22462 Stored XSS in Grafana Text plugin	2 Mar 202300:06	–	vulnrichment
CVE	CVE-2023-22462	2 Mar 202301:15	–	cve
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Cross-site Scripting in Grafana (CVE-2023-22462)	1 Nov 202320:02	–	ibm

Nvd

Node

grafana grafanaRange9.2.0–9.2.10

grafana grafanaRange9.3.0–9.3.4

Source	Link
github	www.github.com/grafana/grafana/security/advisories/GHSA-7rqg-hjwc-6mjf
security	www.security.netapp.com/advisory/ntap-20230413-0004/
grafana	www.grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/
github	www.github.com/grafana/grafana/commit/db83d5f398caffe35c5846cfa7727d1a2a414165

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Mar 2023 01:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS35.4

EPSS0.00121

CWE-79