BIT-GRAFANA-2023-1410 Stored XSS in Graphite FunctionDescription tooltip

🗓️ 06 Mar 2024 10:53:49Reported by GoogleType

osv🔗 osv.dev👁 20 Views

Stored XSS vulnerability in Grafana's FunctionDescription tooltip, requiring control over Graphite data source

Reporter	Title	Published	Views	Family All 62
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Grafana (CVE-2023-1410)	26 Jan 202421:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Grafana	29 Nov 202305:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Grafana (CVE-2023-1410)	18 Jan 202421:15	–	ibm
FreeBSD	Grafana -- Stored XSS in Graphite FunctionDescription tooltip	14 Mar 202300:00	–	freebsd
AlpineLinux	CVE-2023-1410	23 Mar 202308:15	–	alpinelinux
BDU FSTEC	The vulnerability of the Grafana monitoring and observation platform lies in the improper handling of input during the creation of web pages. This allows attackers to execute cross-site scripting (XSS) attacks.	4 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-1410	23 Mar 202311:36	–	circl
CNNVD	Grafana 跨站脚本漏洞	23 Mar 202300:00	–	cnnvd
CVE	CVE-2023-1410	23 Mar 202307:48	–	cve
Cvelist	CVE-2023-1410 Stored XSS in Graphite FunctionDescription tooltip	23 Mar 202307:48	–	cvelist

Source	Link
github	www.github.com/grafana/bugbounty/security/advisories/GHSA-qrrg-gw7w-vp76
grafana	www.grafana.com/security/security-advisories/cve-2023-1410/
security	www.security.netapp.com/advisory/ntap-20230420-0003/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-1410

20 May 2025 10:02Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.14.8 - 6.2

EPSS0.00962

SSVC