Lucene search
Veracode Vulnerability DatabaseVERACODE:25971HistoryJul 28, 2020 - 5:15 a.m.
Cross-site Scripting (XSS)
2020-07-2805:15:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.005 Low
EPSS
Percentile
76.7%
github.com/grafana/grafana is vulnerable to cross-site scripting (XSS). The vulnerability exists as the value of snapshotUrl in public/app/features/dashboard/components/DashNav/DashNav.tsx is not sanitized.
References
github.com/grafana/grafana/blob/master/CHANGELOG.md
github.com/grafana/grafana/blob/master/CHANGELOG.md#672-2020-04-02
github.com/grafana/grafana/commit/9abfbf18e0e2a3a43e064e17c85d32cf28d1f051
github.com/grafana/grafana/commit/fb114a75241aaef4c08581b42509c750738b768a
github.com/grafana/grafana/pull/23254
github.com/grafana/grafana/pull/23262
security.netapp.com/advisory/ntap-20200810-0002/
Related
openvas
openvas
Grafana < 6.7.2 XSS Vulnerability
2020-07-28 00:00:00
redhatcve
redhatcve
CVE-2020-11110
2020-07-27 17:07:49
nvd
nvd
CVE-2020-11110
2020-07-27 13:15:11
cvelist
cvelist
CVE-2020-11110
2020-07-27 12:48:30
cve
cve
CVE-2020-11110
2020-07-27 13:15:11
prion
prion
Input validation
2020-07-27 13:15:00
nuclei
nuclei
Grafana <= 6.7.1 - Cross-Site Scripting
2021-06-20 14:30:19
ubuntucve
ubuntucve
CVE-2020-11110
2020-07-27 00:00:00
osv
osv
BIT-grafana-2020-11110
2024-03-06 11:01:55
Grafana stored XSS in github.com/grafana/grafana
2024-06-28 15:28:53
CVE-2020-11110
2020-07-27 13:15:11
github
github
Grafana stored XSS
2022-05-24 17:24:21
hackerone
hackerone
Mail.ru: CVE-2020-11110: Grafana Unauthenticated Stored XSS -████.bizml.ru
2021-09-03 07:15:55
almalinux
almalinux
Moderate: grafana security, bug fix, and enhancement update
2020-11-03 12:26:41
redhat
redhat
nessus
nessus
RHEL 8 : grafana (RHSA-2020:4682)
2020-11-04 00:00:00
CentOS 8 : grafana (CESA-2020:4682)
2021-02-01 00:00:00
NewStart CGSL MAIN 6.02 : grafana Multiple Vulnerabilities (NS-SA-2021-0066)
2021-03-11 00:00:00
oraclelinux
oraclelinux
grafana security, bug fix, and enhancement update
2020-11-10 00:00:00