CVE-2020-24303

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource

published October 28, 2020

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02078 · 81.3th percentile
Published
2020-10-28T13:25Z
EPSS history
Timeline
  • 28 OCT 13:25Z
    Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource
    cvelistv5