| Package | Affected versions | Patched versions |
|---|---|---|
| grafana | ≥ 12.4.0, < 12.4.4≥ 13.0.0, < 13.0.2 | 12.4.413.0.2 |
A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free