Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hhhx-wxgr-pj4r

Опубликовано: 10 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).

A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).

EPSS

Процентиль: 15%
0.0024
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.7
redhat
2 месяца назад

A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).

CVSS3: 6.8
nvd
2 месяца назад

A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).

CVSS3: 5.4
redos
около 2 месяцев назад

Уязвимость grafana

CVSS3: 5.4
redos
около 2 месяцев назад

Уязвимость grafana

suse-cvrf
2 месяца назад

Security update for grafana

EPSS

Процентиль: 15%
0.0024
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-79