| Max CVSS | 6.4 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-13379 | 6.4 |
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can b
|
29-01-2021 - 16:41 | 03-06-2020 - 19:15 | |
| CVE-2020-12245 | 4.3 |
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
|
10-10-2020 - 18:15 | 24-04-2020 - 21:15 |