GHSA-QRRG-GW7W-VP76 Grafana Stored Cross-site Scripting in Graphite FunctionDescription tooltip

🗓️ 23 Mar 2023 20:10:47Reported by GoogleType

osv🔗 osv.dev👁 18 Views

When using Graphite data source in Grafana, a stored Cross-site Scripting vulnerability in Function Description tooltip allows attackers to execute malicious payloads leading to potential admin privileges

Reporter	Title	Published	Views	Family All 62
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Grafana (CVE-2023-1410)	26 Jan 202421:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Grafana	29 Nov 202305:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Grafana (CVE-2023-1410)	18 Jan 202421:15	–	ibm
FreeBSD	Grafana -- Stored XSS in Graphite FunctionDescription tooltip	14 Mar 202300:00	–	freebsd
AlpineLinux	CVE-2023-1410	23 Mar 202308:15	–	alpinelinux
BDU FSTEC	The vulnerability of the Grafana monitoring and observation platform lies in the improper handling of input during the creation of web pages. This allows attackers to execute cross-site scripting (XSS) attacks.	4 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-1410	23 Mar 202311:36	–	circl
CNNVD	Grafana 跨站脚本漏洞	23 Mar 202300:00	–	cnnvd
CVE	CVE-2023-1410	23 Mar 202307:48	–	cve
Cvelist	CVE-2023-1410 Stored XSS in Graphite FunctionDescription tooltip	23 Mar 202307:48	–	cvelist

Source	Link
github	www.github.com/grafana/bugbounty/security/advisories/GHSA-qrrg-gw7w-vp76
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-1410
github	www.github.com/grafana/grafana/commit/42911348a76e8484396b951bef8b7bff97a84cbc
github	www.github.com/grafana/grafana/commit/e59427c0747ae2f3feb1bfc3a4b87f0886208cc6
github	www.github.com/grafana/grafana/commit/ef2eb2b6bf1d7c0fb781e3e05d0d1aecd6dd438a
github	www.github.com/grafana/grafana/commit/f9548d33f8624d6694983fe5aad181007405be8a
github	www.github.com/grafana/grafana
grafana	www.grafana.com/security/security-advisories/cve-2023-1410

08 Jul 2026 06:29Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.16.2

EPSS0.00962