What is GHSA-ccmg-w4xm-p28v?

GHSA-ccmg-w4xm-p28v is a security advisory published by GitHub Security Advisories with Medium severity. Grafana XSS in header column rename

Which CVE IDs does GHSA-ccmg-w4xm-p28v cover?

GHSA-ccmg-w4xm-p28v covers the following CVE IDs: CVE-2020-12245. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-ccmg-w4xm-p28v?

GHSA-ccmg-w4xm-p28v has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-ccmg-w4xm-p28v?

GHSA-ccmg-w4xm-p28v affects 1 product, including: go/github.com/grafana/grafana:\u003c 6.7.3.

GHSA-ccmg-w4xm-p28vMediumCVSS 6.1

Grafana XSS in header column rename

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

August 7, 2024

🔗 CVE IDs covered (1)

CVE-2020-12245 →

📋 Description

Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.

🎯 Affected products1

go/github.com/grafana/grafana:< 6.7.3

🔗 References (11)

https://nvd.nist.gov/vuln/detail/CVE-2020-12245
https://github.com/grafana/grafana/pull/23816
https://community.grafana.com/t/release-notes-v6-7-x/27119
https://github.com/grafana/grafana/blob/master/CHANGELOG.md#673-2020-04-23
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00060.html
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00017.html
https://github.com/grafana/grafana/commit/0284747c88eb9435899006d26ffaf65f89dec88e
https://security.netapp.com/advisory/ntap-20200511-0001
https://github.com/advisories/GHSA-ccmg-w4xm-p28v