Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:39149
HistoryFeb 07, 2023 - 5:46 a.m.

Cross-Site Scripting (XSS)

2023-02-0705:46:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
102
cross-site scripting
xss
grafana
vulnerability
user inputs
javascript execution

0.001 Low

EPSS

Percentile

50.9%

JSON

github.com/grafana/grafana is vulnerable to Cross-Site Scripting (XSS). The vulnerability exists due to improper sanitization of user inputs in the originalUrl parameter which allows an attacker to inject and execute arbitrary JavaScript.

Related

prion 1
osv 5
ubuntucve 1
nessus 6
cve 1
github 1
ibm 2
cvelist 1
nvd 1
cgr 1
freebsd 2
redhatcve 2
openvas 3
redhat 2
almalinux 1
oraclelinux 1
redos 1
prion
prion
Open redirect
2023-01-27 23:15:00
osv
osv
Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana
2024-06-05 15:10:42
BIT-grafana-2022-39324
2024-03-06 10:54:38
Grafana Spoofing originalUrl of snapshots
2024-05-14 22:29:26
ubuntucve
ubuntucve
CVE-2022-39324
2023-01-27 00:00:00
nessus
nessus
FreeBSD : Grafana -- Spoofing originalUrl of snapshots (e6281d88-a7a7-11ed-8d6a-6c3be5272acd)
2023-02-09 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:0812-1)
2023-03-22 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2023:0821-1)
2023-03-22 00:00:00
cve
cve
CVE-2022-39324
2023-01-27 23:15:08
github
github
Grafana Spoofing originalUrl of snapshots
2024-05-14 22:29:26
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Cross Site Scripting in Grafana (CVE-2022-39324)
2024-01-18 14:30:03
Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.
2023-04-11 11:47:27
cvelist
cvelist
CVE-2022-39324 Grafana vulnerable to spoofing originalUrl of snapshots
2023-01-27 22:42:01
nvd
nvd
CVE-2022-39324
2023-01-27 23:15:08
cgr
cgr
CVE-2022-39324 vulnerabilities
2024-05-19 03:07:16
freebsd
freebsd
Grafana -- Stored XSS in ResourcePicker component
2022-12-16 00:00:00
Grafana -- Spoofing originalUrl of snapshots
2023-01-25 00:00:00
redhatcve
redhatcve
CVE-2022-39324
2023-01-30 13:05:33
CVE-2022-23552
2023-01-30 13:35:45
openvas
openvas
Grafana 8.1.0 < 9.2.10, 9.3.0 < 9.3.4 XSS Vulnerability (GHSA-8xmm-x63g-f6xv)
2023-01-30 00:00:00
Grafana 8.x < 9.2.10, 9.3.0 < 9.3.4 Spoofing Vulnerability (GHSA-4724-7jwc-3fpw)
2023-01-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0812-1)
2023-03-28 00:00:00
redhat
redhat
(RHSA-2023:6420) Moderate: grafana security and enhancement update
2023-11-07 06:05:17
(RHSA-2023:3642) Important: Red Hat Ceph Storage 6.1 Container security and bug fix update
2023-06-15 15:57:53
almalinux
almalinux
Moderate: grafana security and enhancement update
2023-11-07 00:00:00
oraclelinux
oraclelinux
grafana security and enhancement update
2023-11-11 00:00:00
redos
redos
ROS-20240404-01
2024-04-04 00:00:00

0.001 Low

EPSS

Percentile

50.9%

JSON
Related for VERACODE:39149
prion1osv5ubuntucve1nessus6cve1github1ibm2cvelist1nvd1cgr1freebsd2redhatcve2openvas3redhat2almalinux1oraclelinux1redos1