CVE-2018-18623: XSS
Published Jun 2, 2020
·Updated
Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
Affected Software
2 affected componentsFixes available
go/github.com/grafana/grafana<6.0.0-beta1
6.0.0-beta1
Grafana Grafana=5.3.1
Event History
Jun 2, 2020
CVE Published
via MITRE·04:38 PM
Data Sourced
via MITRE·04:38 PM
Description
Jan 30, 2024
Advisory Published
via GitHub·11:47 PM
Frequently Asked Questions
1
What is the vulnerability ID for this Grafana vulnerability?
The vulnerability ID for this Grafana vulnerability is CVE-2018-18623.
2
What is the severity of CVE-2018-18623?
The severity of CVE-2018-18623 is medium, with a CVSS score of 6.1.
3
How does CVE-2018-18623 affect Grafana?
CVE-2018-18623 affects Grafana 5.3.1 and allows XSS attacks via the "Dashboard > Text Panel" screen.
4
Is there a fix available for CVE-2018-18623?
Yes, a fix for CVE-2018-18623 is available in version 6.0.0 of Grafana.
5
What is the CWE ID for CVE-2018-18623?
The CWE ID for CVE-2018-18623 is CWE-79.