PT-2020-13017 · Grafana +4 · Grafana +4

Name of the Vulnerable Software and Affected Versions: Grafana versions prior to 6.7.3 Description: The issue concerns an annotation popup XSS in Grafana. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

Grafana Cross-Site Scripting Vulnerability (CNVD-2020-31592)

Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. A cross-site scripting vulnerability exists in Grafana versions prior to 6.7.3. The...

CVE-2020-12245

Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip...

CVE-2019-9733

An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. This is only allowable from a connection directly from localhost, but providing a...

CVE-2019-9733: Undefined Security Weakness

An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. This is only allowable from a connection directly from localhost, but providing a...