UpHeron
All vulnerabilities

Servers and applications

CVE-2023-0594

Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this will be rendered when the span's attributes/resources are expanded. An attacker needs to have the…

Severity
Medium 5.4
Published
1 Mar 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.5.21, 9.2.13, 9.3.8
Sources
NVD

Affected software

SoftwareAffected versions
GrafanaServers and applications · cpe:a:grafana:grafana
  • From 7.0.0 before 8.5.21
  • From 9.2.0 before 9.2.13
  • From 9.3.0 before 9.3.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-0594
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-0594