Grafana: >> Grafana >> 4.6.5 Security Vulnerabilities
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
CVSS Score
7.5
EPSS Score
0.908
Published
2019-09-03
public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).
CVSS Score
5.4
EPSS Score
0.066
Published
2019-06-30
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.
CVSS Score
6.1
EPSS Score
0.006
Published
2018-06-11
Page 3