XSS in WorldMap Plugin in Grafana
High
- Advisory ID:
- CVE-2023-3010
- Published:
- 2023-06-08
- Product:
- Grafana WorldMap Plugin
- CVSS Score:
- 7.3
- CVSS Vector:
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
- Fixed Versions:
- >=1.0.4
Summary
Grafana is an open-source platform for monitoring and observability. The WorldMap panel plugin, versions before 1.0.4 contains a DOM XSS vulnerability.