CVEs-PoC/2020/CVE-2020-12245.md

CVE-2020-12245

Description

Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.

POC

Reference

• https://community.grafana.com/t/release-notes-v6-7-x/27119
• https://github.com/grafana/grafana/blob/master/CHANGELOG.md#673-2020-04-23
• https://github.com/grafana/grafana/pull/23816

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection