Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade librados-develUpgrade ceph-baseUpgrade librgw-develUpgrade grafanaUpgrade python-cephfsUpgrade ceph-debuginfoUpgrade ceph-fuseUpgrade libcephfs-develUpgrade ceph-radosgwUpgrade ceph-selinuxUpgrade ceph-commonUpgrade ceph-ansibleUpgrade rbd-mirrorUpgrade ceph-mdsUpgrade libradosstriper1Upgrade python-rgwUpgrade librbd-develUpgrade libcephfs2Upgrade librgw2 | Dec 7, 2020 | Jun 11, 2018 |
| Redhat_linux | — | Upgrade ceph-ansibleUpgrade python-cephfsUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade ceph-selinuxUpgrade python-rgwUpgrade ceph-fuseUpgrade ceph-mdsUpgrade librbd-develUpgrade ceph-radosgwUpgrade librgw2Upgrade libradosstriper1Upgrade librgw-develUpgrade libcephfs-develUpgrade ceph-commonUpgrade ceph-baseUpgrade librados-develUpgrade libcephfs2Upgrade grafana | Dec 7, 2020 | Jun 11, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub