Description

Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

Remediation

References

CVE-2018-18623

Related Vulnerabilities

WordPress Plugin Search 10 times faster with Elasticsearch or Apache Solr with lots of data-WPSOLR Cross-Site Scripting (8.6)

WordPress Plugin Esponce QR Code Generator Cross-Site Scripting (1.4)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.19)

WordPress Plugin Include Me Remote Code Execution (1.2.1)

WordPress Plugin TemplatesNext ToolKit Cross-Site Scripting (3.2.7)

Severity

Medium

Classification

CVE-2018-18623 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities