Stored XSS in Graphite FunctionDescription tooltip
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 8.5.22, 9.2.15, 9.3.11, 9.4.7
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: poc
- Automatable: no
- Technical impact: partial
Summary
Grafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. The stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized. An attacker needs to have control over the Graphite data source in order to manipulate a function description and a Grafana admin needs to configure the data source, later a Grafana user needs to select a tampered function and hover over the description. Users may upgrade to version 8.5.22, 9.2.15 and 9.3.11 to receive a fix.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: poc · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Grafana Grafana
From 8.0.0 · fixed in 8.5.22; From 9.0.0 · fixed in 9.2.15; From 9.3.0 · fixed in 9.3.11
- Grafana Grafana Enterprise
From 8.0.0 · fixed in 8.5.22; From 9.0.0 · fixed in 9.2.15; From 9.3.0 · fixed in 9.3.11
- github.com/grafana/grafanaGo
From 8.0.0 · fixed in 8.5.22
- github.com/grafana/grafanaGo
From 9.3.0 · fixed in 9.3.11
- github.com/grafana/grafanaGo
From 9.4.0 · fixed in 9.4.7
- github.com/grafana/grafanaGo
From 9.0.0 · fixed in 9.2.15