Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade librbd-develUpgrade libcephfs2Upgrade rbd-mirrorUpgrade python-rgwUpgrade libradosstriper1Upgrade ceph-commonUpgrade ceph-mdsUpgrade librgw2Upgrade ceph-selinuxUpgrade ceph-ansibleUpgrade ceph-debuginfoUpgrade python-cephfsUpgrade ceph-baseUpgrade librgw-develUpgrade librados-develUpgrade libcephfs-develUpgrade ceph-radosgwUpgrade grafanaUpgrade ceph-fuse | Dec 7, 2020 | Jun 11, 2018 |
| Redhat_linux | — | Upgrade ceph-selinuxUpgrade librgw2Upgrade ceph-debuginfoUpgrade ceph-fuseUpgrade ceph-mdsUpgrade python-cephfsUpgrade rbd-mirrorUpgrade librbd-develUpgrade ceph-ansibleUpgrade ceph-radosgwUpgrade libradosstriper1Upgrade python-rgwUpgrade ceph-commonUpgrade libcephfs2Upgrade libcephfs-develUpgrade grafanaUpgrade ceph-baseUpgrade librados-develUpgrade librgw-devel | Dec 7, 2020 | Jun 11, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub