GO-2024-2520 Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana

Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

SUSE CVE-2020-24303

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource...

Oracle Linux 8 : grafana (ELSA-2021-1859)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1859 advisory. 7.3.6-2 - change working dir to in grafana-cli wrapper fixes Red Hat BZ 1916083 - add pcp-redis-datasource to allowloadingunsignedplugins config option...

grafana: XSS via a query alias for the Elasticsearch and Testdata datasource

A flaw was found in grafana. A XSS via a query alias for the ElasticSearch datasource is allowed...

CVE-2020-24303

A flaw was found in grafana. A XSS via a query alias for the ElasticSearch datasource is allowed...

CVE-2020-24303

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource...

CVE-2020-24303: Improper Neutralization of Input During Web Page Generation

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource...

PT-2020-15676

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 7.1.0-beta1 Description The issue allows for XSS via a query alias for the ElasticSearch datasource. There is no information provided about the estimated number of potentially affected devices worldwide or details abo...