Lucene search
K

5 matches found

OSV
OSV
added 2024/06/28 3:28 p.m.26 views

GO-2024-2520 Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana

Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

6.1CVSS7.1AI score0.01823EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:54 a.m.3 views

SUSE CVE-2020-24303

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource...

5.4CVSS7.3AI score0.01823EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2021/05/26 12:0 a.m.44 views

Oracle Linux 8 : grafana (ELSA-2021-1859)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1859 advisory. 7.3.6-2 - change working dir to in grafana-cli wrapper fixes Red Hat BZ 1916083 - add pcp-redis-datasource to allowloadingunsignedplugins config option...

10CVSS7.6AI score0.04618EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2021/05/18 2:45 p.m.1 views

grafana: XSS via a query alias for the Elasticsearch and Testdata datasource

A flaw was found in grafana. A XSS via a query alias for the ElasticSearch datasource is allowed...

6.1CVSS7.1AI score0.01823EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2020/10/28 6:26 p.m.31 views

CVE-2020-24303

A flaw was found in grafana. A XSS via a query alias for the ElasticSearch datasource is allowed...

4.3CVSS3.4AI score0.01823EPSS
Exploits0References4
Rows per page
Query Builder