En resumen
- CVE-2020-11110 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a github.com/grafana/grafana, grafana (grafana).
- Probabilidad de explotación en los próximos 30 días (EPSS): 9.6%, mayor que el 95.5% de las vulnerabilidades.
- Solución: actualizar a 6.7.2 o posterior.
Description
Grafana through 6.7.1 allows stored XSS.
NVD description
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
Más vulnerabilidades de github.com/grafana/grafana
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free