Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
Metrics
Affected Vendors & Products
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-04T11:21:14.729Z
Reserved: 2020-03-30T00:00:00
Link: CVE-2020-11110

No data.

Status : Modified
Published: 2020-07-27T13:15:11.293
Modified: 2024-11-21T04:56:48.550
Link: CVE-2020-11110


No data.