medium6.1
CVE-2018-12099
Grafana Cross-site Scripting (XSS)
Impact
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/grafana/grafana | < 5.2.0-beta1 | 5.2.0-beta1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grafana | Grafana | through 5.1.3 |
| Netapp | Active Iq Performance Analytics Services | All versions |
| Netapp | Storagegrid Webscale Nas Bridge | All versions |