1 matches found
grafana: Grafana: Stored Cross-Site Scripting via malicious dashboard field name
A flaw in Grafana allows authenticated 'Editor' users to inject malicious scripts into a table panel's field names. Viewing the compromised dashboard executes the script in the victim's browser, risking data theft or client-side attacks...
6.8CVSS0.0024EPSS
SaveExploits0References5
20