Proximyst

3 exploits Active since Apr 2020
CVE-2020-12245 WRITEUP MEDIUM WRITEUP
Grafana < 6.7.3 - XSS
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
CVSS 6.1
CVE-2020-24303 WRITEUP MEDIUM WRITEUP
Grafana <7.1.0-beta - XSS
Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.
CVSS 6.1
CVE-2021-27358 WRITEUP HIGH WRITEUP
Grafana 6.7.3-7.4.1 - DoS
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
CVSS 7.5