Reflected cross-site scripting (XSS) In github.com/grafana/grafana
Description
Grafana Cross-site Scripting vulnerability
public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
go | 6.2.5 |
Aliases
1. 2. 3. 4.
References
1. 2. 3. 4. 5.