Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Cross-site Scripting (XSS)

🗓️ 09 Feb 2022 07:55:18Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 113 Views

github.com/grafana/grafana is vulnerable to cross-site scripting(XSS) attacks. A remote authenticated attacker is able to inject HTML content through the Grafana datasource or the plugin proxy and trick a user to visit a malicious HTML page using a specially crafted link

Related
Detection
Refs
ReporterTitlePublishedViews
Family
altlinux
ALT Linux		Security fix for the ALT Linux 10 package grafana version 8.5.0-alt1
5 May 202200:00
–altlinux
ibm
IBM Security Bulletins		Security Bulletin: IBM Storage Ceph is vulnerable to Cross-site Scripting in Grafana (CVE-2022-21702 )
1 Nov 202320:00
–ibm
nessus
Tenable Nessus		AlmaLinux 8 : grafana (ALSA-2022:7519)
12 Nov 202200:00
–nessus
nessus
Tenable Nessus		AlmaLinux 9 : grafana (ALSA-2022:8057)
19 Nov 202200:00
–nessus
nessus
Tenable Nessus		CentOS 8 : grafana (CESA-2022:7519)
9 Nov 202200:00
–nessus
nessus
Tenable Nessus		CentOS 9 : grafana-9.0.9-1.el9
29 Feb 202400:00
–nessus
nessus
Tenable Nessus		MiracleLinux 8 : grafana-7.5.15-3.el8 (AXSA:2022-4363:06)
20 Jan 202600:00
–nessus
nessus
Tenable Nessus		MiracleLinux 9 : grafana-7.5.15-3.el9 (AXSA:2023-4629:01)
20 Jan 202600:00
–nessus
nessus
Tenable Nessus		Oracle Linux 8 : grafana (ELSA-2022-7519)
15 Nov 202200:00
–nessus
nessus
Tenable Nessus		Oracle Linux 9 : grafana (ELSA-2022-8057)
22 Nov 202200:00
–nessus
Rows per page
Vulners
Node
OR
AND
grafanagrafanaMatch8.3.3-r0go
grafanagrafanaMatch8.1.1-r0go
grafanagrafanaMatch8.0.6-r0go
grafanagrafanaMatch7.5.3-r0go
grafanagrafanaMatch8.2.4-r0go
grafanagrafanaMatch8.2.1-r0go
grafanagrafanaMatch8.3.4-r0go
grafanagrafanaMatch7.5.6-r0go
grafanagrafanaMatch8.0.3-r0go
grafanagrafanaMatch6.7.1-r0go
grafanagrafanaMatch6.7.3-r1go
grafanagrafanaMatch8.1.2-r0go
grafanagrafanaMatch6.7.2-r0go
grafanagrafanaMatch7.5.5-r0go
grafanagrafanaMatch8.1.5-r0go
grafanagrafanaMatch6.7.3-r0go
grafanagrafanaMatch8.2.2-r0go
grafanagrafanaMatch7.4.3-r0go
grafanagrafanaMatch7.4.5-r1go
grafanagrafanaMatch8.2.3-r1go
grafanagrafanaMatch7.5.1-r0go
grafanagrafanaMatch7.5.7-r0go
grafanagrafanaMatch8.0.4-r0go
grafanagrafanaMatch8.0.2-r0go
grafanagrafanaMatch8.3.0-r0go
grafanagrafanaMatch8.1.2-r1go
grafanagrafanaMatch8.3.2-r0go
grafanagrafanaMatch7.5.7-r1go
grafanagrafanaMatch6.7.0-r0go
grafanagrafanaMatch8.1.7-r0go
grafanagrafanaMatch8.1.4-r0go
grafanagrafanaMatch8.0.5-r0go
grafanagrafanaMatch8.3.4-r1go
grafanagrafanaMatch6.6.2-r0go
grafanagrafanaMatch8.1.2-r2go
grafanagrafanaMatch7.5.2-r0go
alpinelinuxalpine_linuxMatchedge
OR
grafanagithub.com/grafana/grafanaRangev3.0-beta1–3.0-beta1go
grafanagithub.com/grafana/grafanaRangev8.0.0-beta1–8.0.0-beta1go
grafanagrafanaMatch7.5.11_2.el8
grafanagrafanaMatch7.5.9_3.el8
grafanagrafanaMatch6.3.6_2.el8_2
grafanagrafanaMatch7.3.6_1.el8
grafanagrafanaMatch7.5.7_1.el8
grafanagrafanaMatch7.5.9_2.el8
grafanagrafanaMatch7.5.11_1.el8
grafanagrafanaMatch7.5.9_4.el8
grafanagrafanaMatch7.5.9_1.el8
grafanagrafanaMatch7.3.4_1.el8
grafanagrafanaMatch7.5.15_1.el8
grafanagrafanaMatch6.7.4_1.el8
grafanagrafanaMatch7.5.15_2.el8
grafanagrafanaMatch6.3.6_1.el8
grafanagrafanaMatch7.5.10_1.el8
grafanagrafanaMatch6.7.4_3.el8
grafanagrafanaMatch6.2.2_2.el8
grafanagrafanaMatch7.3.6_2.el8
grafanagrafanaMatch7.5.7_2.el8
grafanagrafanaMatch7.3.6_3.el8_4
SourceLink
githubwww.github.com/grafana/grafana/issues/226
githubwww.github.com/grafana/grafana/commit/27726868b3d7c613844b55cd209ca93645c99b85
githubwww.github.com/grafana/grafana/pull/386
githubwww.github.com/grafana/grafana/pull/45083
githubwww.github.com/grafana/grafana/commit/254f19c70376286f0dc627b2d95c7f5cc63a8153
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/HLAQRRGNSO5MYCPAXGPH2OCSHOGHSQMQ/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLAQRRGNSO5MYCPAXGPH2OCSHOGHSQMQ/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PFW6Q2LXXWTFRTMTRN4ZGADFRQPKJ3D/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/2PFW6Q2LXXWTFRTMTRN4ZGADFRQPKJ3D/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36GUEPA5TPSC57DZTPYPBL6T7UPQ2FRH/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Nov 2023 22:31Current
1.2Low risk
Vulners AI Score1.2
CVSS 3.15.4 - 6.5
CVSS 22.1
EPSS0.0234
cross-site scriptingxssgrafanahtml injectionplugin proxyremote authenticated attackermalicious link
113