GHSA-7phr-6cc9-4m5qMediumCVSS 5.4

Grafana Cross-site Scripting vulnerability

Published
May 24, 2022
Last Modified
March 27, 2023

🔗 CVE IDs covered (1)

CVE-2019-13068 →

📋 Description

public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).

🎯 Affected products1

  • go/github.com/grafana/grafana:< 6.2.5

🔗 References (6)