The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana ...
grafana Vulnerability Advisory Catalog
Total 125 security vulnerabilities recorded for grafana software and firmware.
CVE-2015-9282
MEDIUM
Component: piechart-panel
📅 2019-02-06
CVSS 6.1
Dossier →
CVE-2018-1000816
MEDIUM
Component: grafana
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can resul...
📅 2018-12-20
CVSS 5.4
Dossier →
CVE-2018-19039
MEDIUM
Component: grafana
Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions....
📅 2018-12-13
CVSS 6.5
Dossier →
CVE-2018-15727
CRITICAL
Component: grafana
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie...
📅 2018-08-29
CVSS 9.8
Dossier →
CVE-2018-12099
MEDIUM
Component: grafana
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links....
📅 2018-06-11
CVSS 6.1
Dossier →
Page 6 of 6 (125 Total Records)