Test ID:	1.3.6.1.4.1.25623.1.0.127372
Category:	Web application abuses
Title:	Grafana < 8.5.22, 9.2.x < 9.2.15, 9.3.x < 9.3.11, 9.4.x < 9.4.7 XSS Vulnerability (GHSA-qrrg-gw7w-vp76)
Summary:	Grafana is prone to a cross-site scripting (XSS); vulnerability.
Description:	Summary: Grafana is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The stored cross-site scripting (XSS) is possible due to improper sanitization of the Function Description value. Affected Software/OS: Grafana prior to version 8.5.22, 9.2.x prior to 9.2.15, 9.3.x prior to 9.3.11 and 9.4.x prior to 9.4.7. Solution: Update to version 8.5.22, 9.2.15, 9.3.11, 9.4.7 or later. CVSS Score: 4.7 CVSS Vector: AV:N/AC:L/Au:M/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-1410 https://github.com/grafana/bugbounty/security/advisories/GHSA-qrrg-gw7w-vp76 https://grafana.com/security/security-advisories/cve-2023-1410/
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.