~ / search / GHSA-7phr-6cc9-4m5q

GHSA-7phr-6cc9-4m5q

Grafana Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-13068

Packages

EcosystemPackageAffectedFixed in
Go github.com/grafana/grafana < 6.2.5 6.2.5

Details

As written in the advisory (Markdown source, shown as plain text).

`public/app/features/panel/panel_ctrl.ts` in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).

References

External links from the advisory. They lead to third-party sites.