| Grafana Arbitrary File ReadCVE-2019-19499 · GHSA-4PWP-CX67-5CPXVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. |
golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Grafana XSS via a column styleCVE-2018-18624 · GHSA-9HV8-4FRF-CPRFVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS via the OpenTSDB datasourceCVE-2020-13430 · GHSA-7M2X-QHRQ-RP8HVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana stored XSSCVE-2020-11110 · GHSA-XR3X-62QW-VC4WVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS in header column renameCVE-2020-12245 · GHSA-CCMG-W4XM-P28VVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana world readable configuration filesCVE-2020-12459 · GHSA-M25M-5778-FM22Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
High
|
Fix reported |
|
| Grafana information disclosureCVE-2020-12458 · GHSA-3JQ7-8PH8-63XMVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
High
|
Fix reported |
|
| Grafana XSS via a query alias for the ElasticSearch datasourceCVE-2020-24303 · GHSA-MVPR-Q6RH-8VRPVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana Cross-site Scripting (XSS)CVE-2018-12099 · GHSA-V5GQ-QVJQ-8P53Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS via adding a link in General featureCVE-2018-18625 · GHSA-6WH2-8HW7-JW94Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana Authentication BypassCVE-2018-15727 · GHSA-RGJG-66CX-5X9MVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Critical
|
Fix reported |
|
| Grafana XSS in Dashboard Text PanelCVE-2018-18623 · GHSA-CMQ2-J8V8-2Q44Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194 · GHSA-83G2-8M93-V3W7Version ranges need review. |
golang.org/x/netLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator |
GoRed Hat |
High
|
Fix reported |
|
| golang.org/x/net/http/httpguts vulnerable to Uncontrolled RecursionCVE-2021-31525 · GHSA-H86H-8PPG-MXMHVersion ranges need review. |
golang.org/x/netstdlib |
GoRed Hat |
Medium
|
Fix reported |
|
| Authentication bypass for viewing and deletions of snapshotsCVE-2021-39226 · GHSA-69J6-29VR-P3J9 |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
High
|
Fix reported |
|
| Regular Expression Denial of Service in hosted-git-infoCVE-2021-23362 · GHSA-43F8-2H32-F4CJ |
hosted-git-infoOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
Medium
|
Fix reported |
|
| gopkg.in/macaron.v1 Open Redirect vulnerabilityCVE-2020-12666 · GHSA-733F-44F3-3FRWVersion ranges need review. |
gopkg.in/macaron.v1Red Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Arbitrary code execution via the go command with cgo in cmd/goCVE-2020-28367 · GO-2022-0476 |
toolchainOpenShift Serverless/knative-serving |
GoRed Hat |
Medium
|
Fix reported |
|
| Arbitrary code execution in go command with cgo in cmd/go and cmd/cgoCVE-2020-28366 · GO-2022-0475 |
toolchainOpenShift Serverless/knative-eventing |
GoRed Hat |
Medium
|
Fix reported |
|
