Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-18623 - Vulnerability Database

Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-18623

Medium

Reference: CVE-2018-18623

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-18623

Title: Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Grafana 5.3.1 has XSS via the quotDashboard gt Text Panelquot screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.