CVE-2023-22462
published 2023-03-02CVE-2023-22462: Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a…
PriorityP428medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
1.56%
72.2th percentile
Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text". The stored XSS vulnerability requires several user interactions in order to be fully exploited. The vulnerability was possible due to React's render cycle that will pass though the unsanitized HTML code, but in the next cycle the HTML is cleaned up and saved in Grafana's database. An attacker needs to have the Editor role in order to change a Text panel to include JavaScript. Another user needs to edit the same Text panel, and click on "Markdown" or "HTML" for the code to be executed. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. This issue has been patched in versions 9.2.10 and 9.3.4.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | grafana_grafana | >= 9.2.0 < 9.2.10 | 9.2.10 |
| github.com | grafana_grafana | >= 9.3.0 < 9.3.4 | 9.3.4 |
| grafana | grafana | — | — |
| grafana | grafana | — | — |
| grafana | grafana | >= 9.2.0 < 9.2.10 | 9.2.10 |
| grafana | grafana | >= 9.3.0 < 9.3.4 | 9.3.4 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
osv5.4MEDIUM
vendor_redhat6.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-22462: Grafana is an open-source platform for monitoring and observability
osv·2023-03-02·CVSS 5.4
CVE-2023-22462 [MEDIUM] CVE-2023-22462: Grafana is an open-source platform for monitoring and observability
Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text". The stored XSS vulnerability requires several user interactions in order to be fully exploited. The vulnerability was possible due to React's render cycle that will pass though the unsanitized HTML code, but in the next cycle the HTML is cleaned up and saved in Grafana's database. An attacker needs to have the Editor role in order to change a Text panel to include JavaScript. Another user needs to edit the same Text panel, and click on "Markdown" or "HTML" for the code to be executed. This means that vertical privilege escalation is possible, where a user with Editor role can
OSV
Grafana vulnerable to Stored Cross-site Scripting in Text plugin
osv·2023-03-01
CVE-2023-22462 [MEDIUM] Grafana vulnerable to Stored Cross-site Scripting in Text plugin
Grafana vulnerable to Stored Cross-site Scripting in Text plugin
### Description
On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text".
The stored XSS vulnerability requires several user interactions in order to be fully exploited. The vulnerability was possible due to React's render cycle that will pass though the unsanitized HTML code, but in the next cycle the HTML is cleaned up and saved in Grafana's database.
### Impact
An attacker needs to have the Editor role in order to change a Text panel to include JavaScript. later, an another user needs to edit the same Text panel, and click on "Markdown" or "HTML" for the code to be executed. This means that vertical privilege escalation is possible
GHSA
Grafana vulnerable to Stored Cross-site Scripting in Text plugin
ghsa·2023-03-01
CVE-2023-22462 [MEDIUM] CWE-79 Grafana vulnerable to Stored Cross-site Scripting in Text plugin
Grafana vulnerable to Stored Cross-site Scripting in Text plugin
### Description
On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text".
The stored XSS vulnerability requires several user interactions in order to be fully exploited. The vulnerability was possible due to React's render cycle that will pass though the unsanitized HTML code, but in the next cycle the HTML is cleaned up and saved in Grafana's database.
### Impact
An attacker needs to have the Editor role in order to change a Text panel to include JavaScript. later, an another user needs to edit the same Text panel, and click on "Markdown" or "HTML" for the code to be executed. This means that vertical privilege escalation is possible
Ivanti
Ivanti Security Advisory: CVE-2025-22462
vendor_ivanti·2025-05-13·CVSS 9.8
CVE-2025-22462 [CRITICAL] CWE-288 Ivanti Security Advisory: CVE-2025-22462
Ivanti Security Advisory: CVE-2025-22462
An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gain administrative access to the system.
CVE IDs: CVE-2025-22462
CVSS Base Score: 9.8
Severity: CRITICAL
CWEs: CWE-288
Red Hat
grafana: stored XSS vulnerability affecting the core plugin "Text"
vendor_redhat·2023-03-02·CVSS 6.4
CVE-2023-22462 [MEDIUM] CWE-79 grafana: stored XSS vulnerability affecting the core plugin "Text"
grafana: stored XSS vulnerability affecting the core plugin "Text"
Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text". The stored XSS vulnerability requires several user interactions in order to be fully exploited. The vulnerability was possible due to React's render cycle that will pass though the unsanitized HTML code, but in the next cycle the HTML is cleaned up and saved in Grafana's database. An attacker needs to have the Editor role in order to change a Text panel to include JavaScript. Another user needs to edit the same Text panel, and click on "Markdown" or "HTML" for the code to be executed. This means that vertical
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/grafana/grafana/commit/db83d5f398caffe35c5846cfa7727d1a2a414165https://github.com/grafana/grafana/security/advisories/GHSA-7rqg-hjwc-6mjfhttps://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/https://security.netapp.com/advisory/ntap-20230413-0004/https://github.com/grafana/grafana/commit/db83d5f398caffe35c5846cfa7727d1a2a414165https://github.com/grafana/grafana/security/advisories/GHSA-7rqg-hjwc-6mjfhttps://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/https://security.netapp.com/advisory/ntap-20230413-0004/
2023-03-02
Published