Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1000816

Опубликовано: 20 дек. 2018
Источник: nvd
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where the payload was previously inserted..

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:grafana:grafana:5.2.4:*:*:*:*:*:*:*
cpe:2.3:a:grafana:grafana:5.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.00424
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2018-1000816

CVSS3: 5.4
ubuntu
больше 6 лет назад

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where the payload was previously inserted..

redhat логотип

CVE-2018-1000816

CVSS3: 5.4
redhat
больше 6 лет назад

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where the payload was previously inserted..

debian логотип

CVE-2018-1000816

CVSS3: 5.4
debian
больше 6 лет назад

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Sc ...

github логотип

GHSA-x5fh-fvvr-892f

CVSS3: 5.4
github
около 3 лет назад

Grafana XSS Vulnerability

EPSS

Процентиль: 61%
0.00424
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79