SUSE-SU-2023:1902-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:1902-1

Related

Published

2023-04-19T03:08:57Z

Modified

2023-04-19T03:08:57Z

Summary

Security update for SUSE Manager Client Tools

Details

This update fixes the following issues:

grafana version update from 8.5.20 to 8.5.22:

Security issues fixed:
- CVE-2023-1410: Fix XSS in Graphite functions tooltip (bsc#1209645)
- CVE-2023-0507: Apply attribute sanitation to GeomapPanel (bsc#1208821)
- CVE-2023-0594: Avoid storing XSS in TraceView panel (bsc#1208819)
The following non-security bug was fixed:
- Login: Fix panic when UpsertUser is called without ReqContext

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.5.22-1.45.1

{
    "binaries": [
        {
            "grafana": "8.5.22-1.45.1"
        }
    ]
}