CVE-2018-18625: XSS

Q: What is CVE-2018-18625?

CVE-2018-18625 is a vulnerability in Grafana 5.3.1 that allows for cross-site scripting (XSS) via a link on the Dashboard > All Panels > General screen.

Published Jun 2, 2020

Updated

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

Affected Software

2 affected componentsFixes available

go/github.com/grafana/grafana<6.0.0-beta1

6.0.0-beta1

Grafana Grafana=5.3.1

Remediation

Patch Available

https://github.com/grafana/grafana/pull/11813

Event History

Jun 2, 2020

CVE Published

via MITRE·04:41 PM

Data Sourced

via MITRE·04:41 PM

Description

Jan 30, 2024

Advisory Published

via GitHub·11:47 PM

Frequently Asked Questions

What is CVE-2018-18625?

CVE-2018-18625 is a vulnerability in Grafana 5.3.1 that allows for cross-site scripting (XSS) via a link on the Dashboard > All Panels > General screen.

What is the severity of CVE-2018-18625?

CVE-2018-18625 has a severity level of medium.

How does CVE-2018-18625 affect Grafana?

CVE-2018-18625 affects Grafana 5.3.1 and allows for XSS attacks through a link on the Dashboard > All Panels > General screen.

How can I fix the CVE-2018-18625 vulnerability?

To fix the CVE-2018-18625 vulnerability, you should update Grafana to the latest version and apply any patches or security updates provided by the vendor.

Where can I find more information about CVE-2018-18625?

You can find more information about CVE-2018-18625 at the following references: [Link 1](https://github.com/grafana/grafana/pull/11813), [Link 2](https://security.netapp.com/advisory/ntap-20200608-0008/).