Skip to content
OpenAdvisories
Medium WID-SEC-2026-0405 2 CVEs

Grafana: Mehrere Schwachstellen

Published Feb 11, 2026 · Updated May 3, 2026 · Revision 4 · de-DE

Vendor: Grafana Vendor: SUSE Product: Grafana Product: Linux Product: openSUSE Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.

Product

Grafana ist eine Analyse- und Visualisierungssoftware.

Vulnerabilities 2

  • Medium 6.8
    CVE-2025-41117

    XSS in Grafana Explore stack trace

    Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear …

    Grafana grafana/grafana-enterprise grafana/grafana grafana Web / CMS Ubuntu Go
  • Medium 5.3
    CVE-2026-21722

    Public Dashboards time range restriction on annotations can be bypassed

    Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked t…

    Grafana grafana/grafana grafana/grafana-enterprise grafana Web / CMS Ubuntu

Revision history

  1. #4

    Neue Updates von openSUSE aufgenommen

  2. #3

    Neue Updates von SUSE aufgenommen

  3. #2

    Neue Updates von SUSE aufgenommen

  4. #1

    Initiale Fassung

References