CVE-2018-18623

CVE-2018-18623

EPSS 1.8%

Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/grafana/grafana/issues/15293 https://github.com/grafana/grafana/pull/11813 https://github.com/grafana/grafana/releases/tag/v6.0.0 https://security.netapp.com/advisory/ntap-20200608-0008/