RHSA-2020:4682MediumCVSS 6.5

Red Hat Security Advisory: grafana security, bug fix, and enhancement update

Published
November 4, 2020
Last Modified
June 26, 2026

🔗 CVE IDs covered (8)

CVE-2020-11110 →CVE-2020-12052 →CVE-2020-12245 →CVE-2020-12458 →CVE-2020-12459 →CVE-2020-13430 →CVE-2018-18624 →CVE-2019-19499 →

📋 Description

CVE-2018-18624 — grafana: XSS vulnerability via a column style on the "Dashboard > Table Panel" screen CVE-2019-19499 — grafana: arbitrary file read via MySQL data source CVE-2020-11110 — grafana: stored XSS CVE-2020-12052 — grafana: XSS annotation popup vulnerability CVE-2020-12245 — grafana: XSS via column.title or cellLinkTooltip CVE-2020-12458 — grafana: information disclosure through world-readable /var/lib/grafana/grafana.db CVE-2020-12459 — grafana: information disclosure through world-readable grafana configuration files CVE-2020-13430 — grafana: XSS via the OpenTSDB datasource

🔗 References (13)