Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-postgresUpgrade grafana-lokiUpgrade grafana-graphiteUpgrade grafana-influxdbUpgrade grafana-stackdriverUpgrade grafana-mssqlUpgrade grafana-azure-monitorUpgrade grafana-mysqlUpgrade grafana-opentsdbUpgrade grafanaUpgrade grafana-cloudwatchUpgrade grafana-prometheusUpgrade grafana-elasticsearch | May 4, 2022 | May 24, 2020 |
| Centos_linux | — | Upgrade grafana-prometheusUpgrade grafana-postgresUpgrade grafana-mssqlUpgrade grafana-lokiUpgrade grafana-opentsdbUpgrade grafana-debuginfoUpgrade grafana-influxdbUpgrade grafanaUpgrade grafana-mysqlUpgrade grafana-graphiteUpgrade grafana-azure-monitorUpgrade grafana-stackdriverUpgrade grafana-cloudwatchUpgrade grafana-elasticsearch | Nov 5, 2020 | May 24, 2020 |
| Oracle_linux | — | Upgrade grafana-postgresUpgrade grafana-opentsdbUpgrade grafana-prometheusUpgrade grafana-cloudwatchUpgrade grafana-graphiteUpgrade grafana-influxdbUpgrade grafana-lokiUpgrade grafanaUpgrade grafana-mysqlUpgrade grafana-azure-monitorUpgrade grafana-stackdriverUpgrade grafana-elasticsearchUpgrade grafana-mssql | Nov 12, 2020 | May 24, 2020 |
| Redhat_linux | — | Upgrade grafana-elasticsearchUpgrade grafana-azure-monitorUpgrade grafana-cloudwatchUpgrade grafana-stackdriverUpgrade grafana-influxdbUpgrade grafana-mssqlUpgrade grafana-mysqlUpgrade grafana-graphiteUpgrade grafana-lokiUpgrade grafana-debuginfoUpgrade grafana-opentsdbUpgrade grafana-prometheusUpgrade grafanaUpgrade grafana-postgres | Nov 5, 2020 | May 24, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub