CVE-2018-18624

Name of the Vulnerable Software and Affected Versions: Grafana versions prior to 7.0.0 Grafana version 5.3.1

Description: The issue is related to a XSS vulnerability via a column style on the "Dashboard > Table Panel" screen. This problem exists due to an incomplete fix for a previous issue.

Recommendations: For Grafana version 5.3.1, consider updating to a version later than 5.3.1 to resolve the issue. For Grafana versions prior to 7.0.0, update to version 7.0.0 or later to fix the vulnerability. As a temporary workaround, consider restricting access to the "Dashboard > Table Panel" screen until a patch is available.