Skip to content

CVE-2020-24303

CVE-2020-24303

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS 6.1 · Medium · EPSS 2.1%

Published: 2020-10-28T13:25:22.000Z
Updated: 2024-08-04T15:12:08.961Z

Stack: system · applications

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
grafana Ubuntu:16.04:LTS
Versions
- 2.6.0+dfsg-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published

Original sources

Check your server →