GHSA-6wh2-8hw7-jw94

Опубликовано: 30 янв. 2024

Источник: github

Github: Прошло ревью

CVSS3: 6.1

Описание

Grafana XSS via adding a link in General feature

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

Ссылки

Пакеты

Наименование

github.com/grafana/grafana

Затронутые версииВерсия исправления

< 6.0.0-beta1

6.0.0-beta1

EPSS

Процентиль: 73%

0.00825

Низкий

6.1 Medium

CVSS3

CVE ID

CVE-2018-18625

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-18625

CVSS3: 6.1

ubuntu

около 5 лет назад

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

CVE-2018-18625

CVSS3: 6.1

redhat

около 5 лет назад

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

CVE-2018-18625

CVSS3: 6.1

nvd

около 5 лет назад

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

CVE-2018-18625

CVSS3: 6.1

debian

около 5 лет назад

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > Gene ...

EPSS

Процентиль: 73%

0.00825

Низкий

6.1 Medium

CVSS3

CVE ID

CVE-2018-18625

Дефекты

CWE-79