Skip to content
OpenAdvisories

Package · Ubuntu

grafana

98 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-21721 Public exploit

    Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation

    The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This i…

    Grafana grafana/grafana grafana/grafana-enterprise grafana Web / CMS Ubuntu
  • High 7.6
    CVE-2025-4123 Public exploit Scanner template EPSS 97%

    Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin

    A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerab…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go