Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-postgresUpgrade grafana-influxdbUpgrade grafana-stackdriverUpgrade grafana-mssqlUpgrade grafana-lokiUpgrade grafana-graphiteUpgrade grafana-opentsdbUpgrade grafana-cloudwatchUpgrade grafana-prometheusUpgrade grafanaUpgrade grafana-mysqlUpgrade grafana-azure-monitorUpgrade grafana-elasticsearch | May 4, 2022 | May 24, 2020 |
| Centos_linux | — | Upgrade grafana-azure-monitorUpgrade grafana-elasticsearchUpgrade grafana-cloudwatchUpgrade grafana-stackdriverUpgrade grafana-influxdbUpgrade grafana-prometheusUpgrade grafana-lokiUpgrade grafanaUpgrade grafana-mssqlUpgrade grafana-postgresUpgrade grafana-mysqlUpgrade grafana-debuginfoUpgrade grafana-graphiteUpgrade grafana-opentsdb | Nov 5, 2020 | May 24, 2020 |
| Oracle_linux | — | Upgrade grafana-elasticsearchUpgrade grafana-azure-monitorUpgrade grafana-mssqlUpgrade grafanaUpgrade grafana-mysqlUpgrade grafana-stackdriverUpgrade grafana-graphiteUpgrade grafana-prometheusUpgrade grafana-cloudwatchUpgrade grafana-influxdbUpgrade grafana-lokiUpgrade grafana-postgresUpgrade grafana-opentsdb | Nov 12, 2020 | May 24, 2020 |
| Redhat_linux | — | Upgrade grafana-elasticsearchUpgrade grafana-stackdriverUpgrade grafana-cloudwatchUpgrade grafana-azure-monitorUpgrade grafana-opentsdbUpgrade grafana-debuginfoUpgrade grafanaUpgrade grafana-influxdbUpgrade grafana-postgresUpgrade grafana-mysqlUpgrade grafana-mssqlUpgrade grafana-graphiteUpgrade grafana-prometheusUpgrade grafana-loki | Nov 5, 2020 | May 24, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub