BIT-grafana-2026-8595

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/grafana/BIT-grafana-2026-8595.json

JSON Data

https://api.test.osv.dev/v1/vulns/BIT-grafana-2026-8595

Aliases

CVE-2026-8595

Published

2026-07-14T08:45:32Z

Modified

2026-09-08T08:47:28Z

Summary

Stored XSS in the table panel (TableNG)

Details

A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).

Database specific

{
    "cpes":  [
        "cpe:2.3:a:grafana:grafana:*:*:*:*:-:*:*:*"
    ],
    "severity":  "Medium"
}

References

Affected packages

Bitnami / grafana

Package

Name: grafana
Purl: pkg:bitnami/grafana

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

12.4.0

Fixed

12.4.4

Introduced

13.0.0

Fixed

13.0.2

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/grafana/BIT-grafana-2026-8595.json"