Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-stackdriverUpgrade grafana-postgresUpgrade grafana-mssqlUpgrade grafana-influxdbUpgrade grafana-lokiUpgrade grafana-graphiteUpgrade grafana-azure-monitorUpgrade grafana-mysqlUpgrade grafanaUpgrade grafana-prometheusUpgrade grafana-cloudwatchUpgrade grafana-elasticsearchUpgrade grafana-opentsdb | May 4, 2022 | May 24, 2020 |
| Centos_linux | — | Upgrade grafana-mssqlUpgrade grafana-postgresUpgrade grafana-prometheusUpgrade grafana-debuginfoUpgrade grafana-graphiteUpgrade grafana-lokiUpgrade grafana-opentsdbUpgrade grafana-mysqlUpgrade grafana-influxdbUpgrade grafanaUpgrade grafana-cloudwatchUpgrade grafana-azure-monitorUpgrade grafana-elasticsearchUpgrade grafana-stackdriver | Nov 5, 2020 | May 24, 2020 |
| Oracle_linux | — | Upgrade grafana-stackdriverUpgrade grafana-elasticsearchUpgrade grafana-mysqlUpgrade grafana-azure-monitorUpgrade grafanaUpgrade grafana-mssqlUpgrade grafana-prometheusUpgrade grafana-lokiUpgrade grafana-postgresUpgrade grafana-opentsdbUpgrade grafana-graphiteUpgrade grafana-influxdbUpgrade grafana-cloudwatch | Nov 12, 2020 | May 24, 2020 |
| Redhat_linux | — | Upgrade grafana-mysqlUpgrade grafana-influxdbUpgrade grafana-mssqlUpgrade grafana-opentsdbUpgrade grafana-prometheusUpgrade grafana-debuginfoUpgrade grafana-lokiUpgrade grafana-graphiteUpgrade grafana-postgresUpgrade grafanaUpgrade grafana-azure-monitorUpgrade grafana-cloudwatchUpgrade grafana-stackdriverUpgrade grafana-elasticsearch | Nov 5, 2020 | May 24, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub