CVE-2020-13430: XSS
Published May 24, 2020
·Updated
A flaw was found in grafana Tag value XSS via the OpenTSDB datasource are possible. The highest threat from this vulnerability is to data confidentiality and integrity.
Other sources
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
Affected Software
6 affected componentsFixes available
redhat/servicemesh-grafana<0:6.2.2-38.el8
0:6.2.2-38.el8
redhat/servicemesh-grafana<0:6.4.3-11.el8
0:6.4.3-11.el8
redhat/grafana<0:6.7.4-3.el8
0:6.7.4-3.el8
redhat/grafana<7.0.0
7.0.0
go/github.com/grafana/grafana<7.0.0
7.0.0
Grafana Grafana<7.0.0
Remediation
Patch Available
Event History
May 24, 2020
CVE Published
12:00 AM
CVE Published
via MITRE·05:24 PM
Data Sourced
via MITRE·05:24 PM
Description
May 24, 2022
Advisory Published
via GitHub·05:18 PM
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
What is CVE-2020-13430?
CVE-2020-13430 is a vulnerability in Grafana before 7.0.0 that allows tag value XSS via the OpenTSDB datasource.
2
What is the impact of CVE-2020-13430?
The highest threat from CVE-2020-13430 is to data confidentiality and integrity.
3
How can I fix CVE-2020-13430?
To fix CVE-2020-13430, update Grafana to version 7.0.0 or later.
4
Where can I find more information about CVE-2020-13430?
You can find more information about CVE-2020-13430 on the following references: [link1], [link2], [link3].
5
What is the Common Weakness Enumeration (CWE) for CVE-2020-13430?
The Common Weakness Enumeration (CWE) for CVE-2020-13430 is CWE-79 (Cross-site Scripting).