Go/github.com/grafana/grafana CVE-2018-18624: medium 6.1, EPSS 1.41%

Grafana XSS via a column style

Action: Upgrade github.com/grafana/grafana to 7.0.0 or later.

go get github.com/grafana/grafana@v7.0.0

Affected

Fixed versions

Sources

• osv: GHSA-9hv8-4frf-cprf
• https://nvd.nist.gov/vuln/detail/CVE-2018-18624
• https://github.com/grafana/grafana/pull/11813
• https://github.com/grafana/grafana/pull/23816
• https://github.com/grafana/grafana/commit/0284747c88eb9435899006d26ffaf65f89dec88e
• https://github.com/grafana/grafana
• https://security.netapp.com/advisory/ntap-20200608-0008

CVE-2018-18624 · published 2022-05-24T17:18:56Z · modified 2026-09-10T03:49:32.413042966Z · JSON