| Max CVSS | 4.3 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-11110 | 3.5 |
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
|
10-02-2023 - 18:04 | 27-07-2020 - 13:15 | |
| CVE-2020-24303 | 4.3 |
Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.
|
03-06-2022 - 18:56 | 28-10-2020 - 14:15 | |
| CVE-2020-12245 | 4.3 |
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
|
10-10-2020 - 18:15 | 24-04-2020 - 21:15 |