Grafana Piechart-Panel vulnerabilities

2 CVEs affecting Grafana Piechart-Panel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-13429, published 2020-05-24.

More from Grafana.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-9282, published 2019-02-06. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an…
• CVE-2020-13429, published 2020-05-24. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option.