CVE-2023-3010: Grafana Worldmap Panel

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Grafana is an open-source platform for monitoring and observability. The WorldMap panel plugin, versions before 1.0.4 contains a DOM XSS vulnerability.

Affected products

• Grafana Worldmap Panel: before 1.0.4 (fixed in 1.0.4)

Published 2023-10-25. Last modified 2026-06-17.