| XSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358 · DRUPAL-CORE-2019-006Version ranges need review. |
drupal/coremaximebf/debugbar |
ComposerMavennpmNuGetPyPIRed HatRubyGems |
Medium
|
Fix reported |
|
| Grafana Arbitrary File ReadCVE-2019-19499 · GHSA-4PWP-CX67-5CPXVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS via a column styleCVE-2018-18624 · GHSA-9HV8-4FRF-CPRFVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. |
github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
High
|
Fix reported |
|
| Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 |
momentmoment.js |
npmNuGetRed Hat |
High
|
Fix reported |
|
| golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. |
golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container |
GoRed Hat |
Medium
|
Fix reported |
|
| Potential XSS vulnerability in jQueryCVE-2020-11022 · GHSA-GXR4-XJJ5-5PX2 |
athlon1600/youtube-downloadercomponents/jquery |
ComposerMavennpmNuGetRed HatRubyGems |
Medium
|
Fix reported |
|
| Regular Expression Denial of Service (ReDoS) in PrismCVE-2021-32723 · GHSA-GJ77-59WH-66HG |
prismjsOpenShift Service Mesh 1/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| Grafana XSS via the OpenTSDB datasourceCVE-2020-13430 · GHSA-7M2X-QHRQ-RP8HVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana stored XSSCVE-2020-11110 · GHSA-XR3X-62QW-VC4WVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS in header column renameCVE-2020-12245 · GHSA-CCMG-W4XM-P28VVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana world readable configuration filesCVE-2020-12459 · GHSA-M25M-5778-FM22Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
High
|
Fix reported |
|
| Grafana Email addresses and usernames can not be trustedCVE-2022-39306 · GHSA-2X6G-H2HG-RQ84Version ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 2.0/openshift-service-mesh/grafana-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Grafana information disclosureCVE-2020-12458 · GHSA-3JQ7-8PH8-63XMVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
High
|
Fix reported |
|
| Prototype Pollution in minimistCVE-2021-44906 · GHSA-XVCH-5GV4-984H |
minimistMigration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8 |
npmRed Hat |
Critical
|
Fix reported |
|
| Prototype Pollution in minimistCVE-2020-7598 · GHSA-VH95-RMGR-6W4M |
minimistLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 |
npmRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS via adding a link in General featureCVE-2018-18625 · GHSA-6WH2-8HW7-JW94Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS in Dashboard Text PanelCVE-2018-18623 · GHSA-CMQ2-J8V8-2Q44Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana Plugin signature bypassCVE-2022-31123 · GHSA-RHXJ-GH46-JVW8Version ranges need review. |
github.com/grafana/grafanaRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Grafana when using email as a username can block other users from signing inCVE-2022-39229 · GHSA-GJ7M-853R-289RVersion ranges need review. |
github.com/grafana/grafanaRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
