{"action":"Upgrade github.com/grafana/grafana to 9.2.10 or later.","affected":[{"fixed":"9.2.10","introduced":"9.2.0"},{"fixed":"9.3.4","introduced":"9.3.0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2023-22462"],"ecosystem":"Go","epss":0.01562,"exploited":false,"fixed_versions":["9.2.10","9.3.4"],"ghsa_id":"GHSA-7rqg-hjwc-6mjf","id":"tcs_01M5KF2KKCJNCSDGDN3JX7ZB25","modified_at":"2026-09-10T03:49:52.753855520Z","published_at":"2023-03-01T20:56:49Z","references":["https://osv.dev/vulnerability/GHSA-7rqg-hjwc-6mjf","https://github.com/grafana/grafana/security/advisories/GHSA-7rqg-hjwc-6mjf","https://nvd.nist.gov/vuln/detail/CVE-2023-22462","https://github.com/grafana/grafana/commit/db83d5f398caffe35c5846cfa7727d1a2a414165","https://github.com/grafana/grafana","https://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462","https://security.netapp.com/advisory/ntap-20230413-0004"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-7rqg-hjwc-6mjf","url":"https://osv.dev/vulnerability/GHSA-7rqg-hjwc-6mjf"}],"summary":"Grafana vulnerable to Stored Cross-site Scripting in Text plugin"}