Description

Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.

Remediation

References

CVE-2020-13430

Related Vulnerabilities

Chamilo Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2025-52469)

Python Files or Directories Accessible to External Parties Vulnerability (CVE-2019-13404)

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9130)

IBM WebSEAL Missing Authorization Vulnerability (CVE-2020-4499)

Envoy Proxy Detection of Error Condition Without Action Vulnerability (CVE-2024-30255)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2020-13430