CVE-2018-18623: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Grafana 5.3.1 has XSS via the “Dashboard > Text Panel” screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
References
- github.com/advisories/GHSA-cmq2-j8v8-2q44
- github.com/grafana/grafana/issues/15293
- github.com/grafana/grafana/issues/4117
- github.com/grafana/grafana/pull/11813
- github.com/grafana/grafana/pull/14984
- github.com/grafana/grafana/releases/tag/v6.0.0
- nvd.nist.gov/vuln/detail/CVE-2018-18623
- security.netapp.com/advisory/ntap-20200608-0008/
Detect and mitigate CVE-2018-18623 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →