Grafana — свободная программная система визуализации данных, ориентированная на данные систем ИТ-мониторинга.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 11.6.16 | 11.6.16 | ||
| 11.6.15 | 11.6.15 | ||
| 11.6.14 | 11.6.14+security-04 | ||
| 11.6.14 | 11.6.14+security-01 | ||
| 11.6.14 | 11.6.14 | ||
| 11.6.13 | 11.6.13 | ||
| 11.6.12 | 11.6.12 | ||
| 11.6.11 | 11.6.11 | ||
| 11.6.10 | 11.6.10+security-01 | ||
| 11.6.10 | 11.6.10 |
Показывать по
Количество 602
CVE-2018-18624
Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
CVE-2018-18625
Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
CVE-2020-13430
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVE-2020-13430
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVE-2020-13430
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVE-2020-13430
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
ELSA-2020-1659
ELSA-2020-1659: grafana security, bug fix, and enhancement update (MODERATE)
CVE-2020-12458
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
CVE-2020-12459
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.
CVE-2020-12458
An information-disclosure flaw was found in Grafana through 6.7.3. The ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2018-18624 Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099. | CVSS3: 6.1 | 1% Низкий | больше 6 лет назад |
| CVE-2018-18625 Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099. | CVSS3: 6.1 | 1% Низкий | больше 6 лет назад |
 | CVE-2020-13430 Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
 | CVE-2020-13430 Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-13430 Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| CVE-2020-13430 Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. | CVSS3: 6.1 | 2% Низкий | больше 6 лет назад |
| ELSA-2020-1659 ELSA-2020-1659: grafana security, bug fix, and enhancement update (MODERATE) | 63% Средний | больше 6 лет назад | |
| CVE-2020-12458 An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords). | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2020-12459 In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable. | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2020-12458 An information-disclosure flaw was found in Grafana through 6.7.3. The ... | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу