Логотип exploitDog
bind:CVE-2020-11110
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-11110

Количество 6

Количество 6

ubuntu логотип

CVE-2020-11110

больше 5 лет назад

Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.

CVSS3: 5.4
EPSS: Высокий
redhat логотип

CVE-2020-11110

больше 5 лет назад

Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.

CVSS3: 6.1
EPSS: Высокий
nvd логотип

CVE-2020-11110

больше 5 лет назад

Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.

CVSS3: 5.4
EPSS: Высокий
debian логотип

CVE-2020-11110

больше 5 лет назад

Grafana through 6.7.1 allows stored XSS due to insufficient input prot ...

CVSS3: 5.4
EPSS: Высокий
github логотип

GHSA-xr3x-62qw-vc4w

больше 3 лет назад

Grafana stored XSS

CVSS3: 5.4
EPSS: Высокий
oracle-oval логотип

ELSA-2020-4682

почти 5 лет назад

ELSA-2020-4682: grafana security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-11110

Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.

CVSS3: 5.4
76%
Высокий
больше 5 лет назад
redhat логотип
CVE-2020-11110

Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.

CVSS3: 6.1
76%
Высокий
больше 5 лет назад
nvd логотип
CVE-2020-11110

Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.

CVSS3: 5.4
76%
Высокий
больше 5 лет назад
debian логотип
CVE-2020-11110

Grafana through 6.7.1 allows stored XSS due to insufficient input prot ...

CVSS3: 5.4
76%
Высокий
больше 5 лет назад
github логотип
GHSA-xr3x-62qw-vc4w

Grafana stored XSS

CVSS3: 5.4
76%
Высокий
больше 3 лет назад
oracle-oval логотип
ELSA-2020-4682

ELSA-2020-4682: grafana security, bug fix, and enhancement update (MODERATE)

почти 5 лет назад

Уязвимостей на страницу