CVE-2019-13068

public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field)

published June 29, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
52%
Percentile
99.0
In the wild
Unconfirmed
What it is

public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.51915 · 99.0th percentile
Published
2019-06-29T00:00Z
EPSS history
Timeline
  • 29 JUN 00:00Z
    public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field)
    cvelistv5