Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-opentsdbUpgrade grafana-graphiteUpgrade grafana-postgresUpgrade grafana-stackdriverUpgrade grafana-cloudwatchUpgrade grafana-prometheusUpgrade grafana-influxdbUpgrade grafana-lokiUpgrade grafanaUpgrade grafana-elasticsearchUpgrade grafana-azure-monitorUpgrade grafana-mssqlUpgrade grafana-mysql | May 4, 2022 | Apr 27, 2020 |
| Centos_linux | — | Upgrade grafana-cloudwatchUpgrade grafana-opentsdbUpgrade grafana-prometheusUpgrade grafana-azure-monitorUpgrade grafana-elasticsearchUpgrade grafana-mysqlUpgrade grafanaUpgrade grafana-postgresUpgrade grafana-mssqlUpgrade grafana-debuginfoUpgrade grafana-graphiteUpgrade grafana-stackdriverUpgrade grafana-lokiUpgrade grafana-influxdb | Nov 5, 2020 | Apr 27, 2020 |
| Oracle_linux | — | Upgrade grafana-stackdriverUpgrade grafanaUpgrade grafana-prometheusUpgrade grafana-mysqlUpgrade grafana-mssqlUpgrade grafana-lokiUpgrade grafana-postgresUpgrade grafana-influxdbUpgrade grafana-elasticsearchUpgrade grafana-cloudwatchUpgrade grafana-graphiteUpgrade grafana-azure-monitorUpgrade grafana-opentsdb | Nov 12, 2020 | Apr 27, 2020 |
| Redhat_linux | — | Upgrade grafana-postgresUpgrade grafana-debuginfoUpgrade grafana-opentsdbUpgrade grafana-graphiteUpgrade grafana-mssqlUpgrade grafana-influxdbUpgrade grafana-mysqlUpgrade grafana-cloudwatchUpgrade grafanaUpgrade grafana-lokiUpgrade grafana-stackdriverUpgrade grafana-azure-monitorUpgrade grafana-prometheusUpgrade grafana-elasticsearch | Nov 5, 2020 | Apr 27, 2020 |
| Suse | — | Upgrade system-user-grafana | Jun 9, 2021 | Apr 27, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub