SUSE-SU-2023:1904-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:1904-1

Related

Published

2023-04-19T03:09:30Z

Modified

2023-04-19T03:09:30Z

Summary

Security update for grafana

Details

This version update from 8.5.20 to 8.5.22 for grafana fixes the following issues:

Security issues fixed:
- CVE-2023-1410: Fix XSS in Graphite functions tooltip (bsc#1209645)
- CVE-2023-0507: Apply attribute sanitation to GeomapPanel (bsc#1208821)
- CVE-2023-0594: Avoid storing XSS in TraceView panel (bsc#1208819)
The following non-security bug was fixed:
- Login: Fix panic when UpsertUser is called without ReqContext

References

Affected packages

Name: grafana
Purl: purl:rpm/suse/grafana&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.5.22-150200.3.38.1

{
    "binaries": [
        {
            "grafana": "8.5.22-150200.3.38.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.5.22-150200.3.38.1

{
    "binaries": [
        {
            "grafana": "8.5.22-150200.3.38.1"
        }
    ]
}