Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-lokiUpgrade grafana-mysqlUpgrade grafana-stackdriverUpgrade grafana-mssqlUpgrade grafana-elasticsearchUpgrade grafana-azure-monitorUpgrade grafanaUpgrade grafana-graphiteUpgrade grafana-postgresUpgrade grafana-opentsdbUpgrade grafana-cloudwatchUpgrade grafana-influxdbUpgrade grafana-prometheus | May 4, 2022 | Apr 24, 2020 |
| Centos_linux | — | Upgrade grafana-azure-monitorUpgrade grafana-mssqlUpgrade grafana-stackdriverUpgrade grafana-postgresUpgrade grafana-mysqlUpgrade grafana-lokiUpgrade grafanaUpgrade grafana-graphiteUpgrade grafana-debuginfoUpgrade grafana-opentsdbUpgrade grafana-cloudwatchUpgrade grafana-influxdbUpgrade grafana-elasticsearchUpgrade grafana-prometheus | Nov 5, 2020 | Apr 24, 2020 |
| Oracle_linux | — | Upgrade grafana-stackdriverUpgrade grafana-mysqlUpgrade grafana-elasticsearchUpgrade grafanaUpgrade grafana-cloudwatchUpgrade grafana-postgresUpgrade grafana-lokiUpgrade grafana-mssqlUpgrade grafana-graphiteUpgrade grafana-influxdbUpgrade grafana-prometheusUpgrade grafana-opentsdbUpgrade grafana-azure-monitor | Nov 12, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade grafana-debuginfoUpgrade grafana-azure-monitorUpgrade grafana-cloudwatchUpgrade grafana-stackdriverUpgrade grafana-elasticsearchUpgrade grafana-graphiteUpgrade grafana-mysqlUpgrade grafana-postgresUpgrade grafana-mssqlUpgrade grafana-prometheusUpgrade grafana-opentsdbUpgrade grafanaUpgrade grafana-lokiUpgrade grafana-influxdb | Nov 5, 2020 | Apr 24, 2020 |
| Suse | — | Upgrade dracut-saltbootUpgrade golang-github-prometheus-node_exporterUpgrade grafana-piechart-panelUpgrade grafana-status-panelUpgrade grafana | Jun 29, 2020 | Apr 24, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub