CVE-2018-18625

CVE-2018-18625

EPSS 1.2%

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/grafana/grafana/pull/11813 https://security.netapp.com/advisory/ntap-20200608-0008/