-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from unsanitized tag values in OpenTSDB datasource processing. The GitHub PR #24539 specifically adds HTML sanitization to the tag value handling in the OpenTSDB datasource. The commit shows modifications to the typeahead/suggestion logic where raw tag values were displayed. The 'getTagValues' function would be responsible for retrieving these unsanitized values from OpenTSDB and passing them to the UI layer without proper escaping, making it the likely vulnerable function. The high confidence comes from the explicit security fix in the referenced pull request targeting this exact component.
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/grafana/grafana | go | < 7.0.0 | 7.0.0 |
Ongoing coverage of React2Shell