CVE-2019-13068

Опубликовано: 30 июн. 2019

Источник: nvd

CVSS3: 5.4

CVSS2: 4.3

EPSS Низкий

Описание

public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).

Ссылки

http://packetstormsecurity.com/files/171500/Grafana-6.2.4-HTML-Injection.html
https://github.com/grafana/grafana/issues/17718
Third Party Advisory
https://github.com/grafana/grafana/releases/tag/v6.2.5
Release Notes
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190710-0001/
http://packetstormsecurity.com/files/171500/Grafana-6.2.4-HTML-Injection.html
https://github.com/grafana/grafana/issues/17718
Third Party Advisory
https://github.com/grafana/grafana/releases/tag/v6.2.5
Release Notes
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190710-0001/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*

Версия до 6.2.5 (исключая)

EPSS

Процентиль: 91%

0.06596

Низкий

5.4 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2019-13068

CVSS3: 5.4

ubuntu

почти 6 лет назад

public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).

CVE-2019-13068

CVSS3: 5.4

debian

почти 6 лет назад

public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows ...

GHSA-7phr-6cc9-4m5q

CVSS3: 5.4

github

около 3 лет назад

Grafana Cross-site Scripting vulnerability

EPSS

Процентиль: 91%

0.06596

Низкий

5.4 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79