UpHeron
All vulnerabilities

Servers and applications

CVE-2022-21702

Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML content thru the Grafana datasource or plugin proxy and trick a user to visit this HTML page using a specially crafted link and execute a Cross-site Scripting (XSS) attack. The attacker could either compromise an existing datasource for a specific Grafana instance or either set…

Severity
Medium 5.4
Published
8 Feb 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.5.15, 8.3.5
Sources
NVD

Affected software

SoftwareAffected versions
GrafanaServers and applications · cpe:a:grafana:grafana
  • Version 2.0.0-beta1
  • Version 2.0.0-beta3
  • From 2.0.1 before 7.5.15
  • From 8.0.0 before 8.3.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-21702
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-21702