{"id":"CVE-2020-13430","published":"2020-05-24T17:24:18Z","modified":"2024-08-04T12:18:18Z","title":"Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource","vendor":null,"product":null,"tier":"tail","description":{"text":"Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01873,"percentile":0.79228,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/grafana/grafana/releases/tag/v7.0.0","tags":["x_refsource_MISC"]},{"url":"https://github.com/grafana/grafana/pull/24539","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20200528-0003/","tags":["x_refsource_CONFIRM"]}],"priority":{"score":15.8,"factors":[{"name":"EPSS percentile","points":15.85}]},"affected":[{"ecosystem":"Go","package":"github.com/grafana/grafana","vulnerableRanges":["<7.0.0","all versions"],"patched":["7.0.0"],"from":["GHSA-7m2x-qhrq-rp8h","GO-2024-2515"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3028","exploited":false,"provenance":"source"}}