EUVD-2022-5716

Malicious code in bioql PyPI...

CVE-2018-1000816: Improper Neutralization of Input During Web Page Generation

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...

PT-2018-9540

Name of the Vulnerable Software and Affected Versions Grafana versions 5.2.4 and 5.3.0 Description The issue concerns a Cross Site Scripting XSS vulnerability in the Influxdb and Graphite query editor. This vulnerability can lead to the execution of arbitrary JavaScript code in the victim's...