Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-cloudwatchUpgrade grafana-opentsdbUpgrade grafana-prometheusUpgrade grafana-postgresUpgrade grafana-influxdbUpgrade grafana-graphiteUpgrade grafana-azure-monitorUpgrade grafana-lokiUpgrade grafana-stackdriverUpgrade grafana-mysqlUpgrade grafanaUpgrade grafana-mssqlUpgrade grafana-elasticsearch | May 4, 2022 | Apr 24, 2020 |
| Centos_linux | — | Upgrade grafana-azure-monitorUpgrade grafana-mssqlUpgrade grafana-stackdriverUpgrade grafana-postgresUpgrade grafana-mysqlUpgrade grafana-lokiUpgrade grafanaUpgrade grafana-graphiteUpgrade grafana-debuginfoUpgrade grafana-opentsdbUpgrade grafana-cloudwatchUpgrade grafana-influxdbUpgrade grafana-elasticsearchUpgrade grafana-prometheus | Nov 5, 2020 | Apr 24, 2020 |
| Oracle_linux | — | Upgrade grafana-cloudwatchUpgrade grafana-lokiUpgrade grafana-elasticsearchUpgrade grafanaUpgrade grafana-mysqlUpgrade grafana-postgresUpgrade grafana-stackdriverUpgrade grafana-mssqlUpgrade grafana-graphiteUpgrade grafana-opentsdbUpgrade grafana-influxdbUpgrade grafana-prometheusUpgrade grafana-azure-monitor | Nov 12, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade grafana-mssqlUpgrade grafana-opentsdbUpgrade grafana-mysqlUpgrade grafana-lokiUpgrade grafana-influxdbUpgrade grafanaUpgrade grafana-prometheusUpgrade grafana-postgresUpgrade grafana-graphiteUpgrade grafana-elasticsearchUpgrade grafana-debuginfoUpgrade grafana-cloudwatchUpgrade grafana-stackdriverUpgrade grafana-azure-monitor | Nov 5, 2020 | Apr 24, 2020 |
| Suse | — | Upgrade grafanaUpgrade grafana-status-panelUpgrade dracut-saltbootUpgrade grafana-piechart-panelUpgrade golang-github-prometheus-node_exporter | Jun 29, 2020 | Apr 24, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub