CVE-2020-24303: Grafana

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

Affected products

• Grafana Grafana: up to and including 7.0.5

Published 2020-10-28. Last modified 2026-06-17.