ALT-PU-2020-1966: package grafana update to version 6.7.3-alt1
Описание
This update upgrades grafana to version 6.7.3-alt1.
Устраненные уязвимости5
Ссылки4
GHSA-3jq7-8ph8-63xm
https://github.com/advisories/GHSA-3jq7-8ph8-63xmGHSA-ccmg-w4xm-p28v
https://github.com/advisories/GHSA-ccmg-w4xm-p28vGHSA-xr3x-62qw-vc4w
https://github.com/advisories/GHSA-xr3x-62qw-vc4wСвязанные уязвимости
ELSA-2020-4682: grafana security, bug fix, and enhancement update (MODERATE)
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
Grafana through 6.7.1 allows stored XSS due to insufficient input prot ...