{"action":"Upgrade github.com/grafana/grafana to 8.5.22 or later.","affected":[{"fixed":"8.5.22","introduced":"8.0.0"},{"fixed":"9.3.11","introduced":"9.3.0"},{"fixed":"9.4.7","introduced":"9.4.0"},{"fixed":"9.2.15","introduced":"9.0.0"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2023-1410"],"ecosystem":"Go","epss":0.00954,"exploited":false,"fixed_versions":["8.5.22","9.3.11","9.4.7","9.2.15"],"ghsa_id":"GHSA-qrrg-gw7w-vp76","id":"tcs_01M5KFKJ21NG8153S0S309ZJCB","modified_at":"2026-07-08T06:29:24.762272470Z","published_at":"2023-03-23T20:10:47Z","references":["https://osv.dev/vulnerability/GHSA-qrrg-gw7w-vp76","https://github.com/grafana/bugbounty/security/advisories/GHSA-qrrg-gw7w-vp76","https://nvd.nist.gov/vuln/detail/CVE-2023-1410","https://github.com/grafana/grafana/commit/42911348a76e8484396b951bef8b7bff97a84cbc","https://github.com/grafana/grafana/commit/e59427c0747ae2f3feb1bfc3a4b87f0886208cc6","https://github.com/grafana/grafana/commit/ef2eb2b6bf1d7c0fb781e3e05d0d1aecd6dd438a","https://github.com/grafana/grafana/commit/f9548d33f8624d6694983fe5aad181007405be8a","https://github.com/grafana/grafana","https://grafana.com/security/security-advisories/cve-2023-1410"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-qrrg-gw7w-vp76","url":"https://osv.dev/vulnerability/GHSA-qrrg-gw7w-vp76"}],"summary":"Grafana Stored Cross-site Scripting in Graphite FunctionDescription tooltip"}