5 matches found
GO-2024-2520 Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana
Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...
SUSE CVE-2020-24303
Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource...
Oracle Linux 8 : grafana (ELSA-2021-1859)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1859 advisory. 7.3.6-2 - change working dir to in grafana-cli wrapper fixes Red Hat BZ 1916083 - add pcp-redis-datasource to allowloadingunsignedplugins config option...
grafana: XSS via a query alias for the Elasticsearch and Testdata datasource
A flaw was found in grafana. A XSS via a query alias for the ElasticSearch datasource is allowed...
CVE-2020-24303
A flaw was found in grafana. A XSS via a query alias for the ElasticSearch datasource is allowed...