Web Hosting

Grafana

The open-source platform for monitoring and observability.

Official Site:

https://grafana.com/get

Severity Summary:

Critical: 7 High: 25 Medium: 38 Low: 4

Reference

Title

Severity

CVE-2021-41174

Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-43815

Grafana Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Medium

CVE-2022-21673

Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2021-43813

Grafana Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Medium

CVE-2018-18625

Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-21713

Grafana Incorrect Authorization Vulnerability

Medium

CVE-2022-21702

Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2020-11110

Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-31097

Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2020-13430

Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-36062

Grafana Improper Preservation of Permissions Vulnerability

Low

CVE-2024-10452

Grafana Authorization Bypass Through User-Controlled Key Vulnerability

Low

CVE-2022-39324

Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low

CVE-2026-21725

Grafana Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

Low