Test ID:	1.3.6.1.4.1.25623.1.0.148469
Category:	Web application abuses
Title:	Grafana XSS Vulnerability (GHSA-vw7q-p2qg-4m5f)
Summary:	Grafana is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: Grafana is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Impact: An attacker can exploit this vulnerability to escalate privilege from editor to admin by tricking an authenticated admin to click on a link. Affected Software/OS: Grafana version 8.x through 8.3.9, 8.4.x through 8.4.9, 8.5.x through 8.5.8 and 9.x through 9.0.2. Solution: Update to version 8.3.10, 8.4.10, 8.5.9, 9.0.3 or later. CVSS Score: 8.5 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-31097 https://github.com/grafana/grafana/security/advisories/GHSA-vw7q-p2qg-4m5f https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-5-9/ https://grafana.com/docs/grafana/latest/release-notes/release-notes-9-0-3/ https://grafana.com/docs/grafana/next/release-notes/release-notes-8-4-10/
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.