logo

Database

Reflected cross-site scripting (XSS) In github.com/grafana/grafana

Description

Grafana XSS via a column style Grafana has a XSS vulnerability via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2018-186242. NVD-2018-186243. OSV-2018-186244. GCVE-2018-18624

References

1. https://github.com/grafana/grafana/pull/118132. https://github.com/grafana/grafana/pull/238163. https://github.com/grafana/grafana/commit/0284747c88eb9435899006d26ffaf65f89dec88e4. https://security.netapp.com/advisory/ntap-20200608-0008

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.