title: Stored XSS in Graphite FunctionDescription tooltip
description: Grafana is an open-source platform for monitoring and observability.
Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip.
The stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized.
An attacker needs to have control over the Graphite data source in order to manipulate a function description and a Grafana admin needs to configure the data source, later a Grafana user needs to select a tampered function and hover over the description.
Users may upgrade to version 8.5.22, 9.2.15 and 9.3.11 to receive a fix.
problem types: CWE-79
affected:
{
defaultStatus: unaffected
product: Grafana
vendor: Grafana
versions:
lessThan: 8.5.22, status: affected, version: 8.0.0, versionType: semver
lessThan: 9.2.15, status: affected, version: 9.0.0, versionType: semver
lessThan: 9.3.11, status: affected, version: 9.3.0, versionType: semver
}
{
defaultStatus: unaffected
product: Grafana Enterprise
vendor: Grafana
versions:
lessThan: 8.5.22, status: affected, version: 8.0.0, versionType: semver
lessThan: 9.2.15, status: affected, version: 9.0.0, versionType: semver
lessThan: 9.3.11, status: affected, version: 9.3.0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL