Описание
Grafana Cross-site Scripting vulnerability
public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).
Пакеты
Наименование
github.com/grafana/grafana
go
Затронутые версииВерсия исправления
< 6.2.5
6.2.5
Связанные уязвимости
CVSS3: 5.4
ubuntu
больше 7 лет назад
public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).
CVSS3: 5.4
nvd
больше 7 лет назад
public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).
CVSS3: 5.4
debian
больше 7 лет назад
public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows ...
CVSS3: 5.4
altlinux
больше 7 лет назад
ALT-PU-2019-2257: package `grafana` update to version 6.2.5-alt1