VYPR
← All advisories
Moderate severityNVD Advisory· Published Jun 2, 2020· Updated Aug 5, 2024

CVE-2018-18624

CVE-2018-18624

Description

Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Grafana 5.3.1 has a stored XSS in the table panel due to incomplete sanitization of column styles, allowing arbitrary JavaScript execution.

Vulnerability

Overview

CVE-2018-18624 is a stored cross-site scripting (XSS) vulnerability affecting Grafana versions up to 5.3.1. The flaw exists in the table panel's column style functionality, where user-controlled input is not properly sanitized. This issue is a direct result of an incomplete fix for a previous vulnerability, CVE-2018-12099 [1][2].

Exploitation

An attacker with the ability to create or edit dashboards can inject malicious JavaScript into column style fields (e.g., header names or tooltips). When a victim views the affected dashboard, the script executes in their browser. No authentication is required beyond standard dashboard editing permissions [1].

Impact

Successful exploitation allows an attacker to execute arbitrary JavaScript in the context of the victim's Grafana session. This could lead to session hijacking, data exfiltration, or unauthorized actions performed on behalf of the victim [2].

Mitigation

Grafana addressed this vulnerability in a security patch merged in PR #23816 around April 2020 [1]. Users should upgrade to a version containing the fix (e.g., Grafana 6.7.4 or later). There is no workaround, as the fix involves proper sanitization of column style inputs [2][1].

References
  1. Security: Fix XSS vulnerability in table panel by torkelo · Pull Request #23816 · grafana/grafana
  2. NVD - CVE-2018-18624

AI Insight generated on May 21, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
github.com/grafana/grafanaGo
< 7.0.07.0.0

Affected products

252

Patches

1
0284747c88eb

TablePanel: Fix XSS issue in header column rename (#23816)

https://github.com/grafana/grafanaTorkel ÖdegaardApr 23, 2020via ghsa
commit
1 file changed · +2 −2
  • public/app/plugins/panel/table-old/renderer.ts+2 −2 modified
    @@ -56,7 +56,7 @@ export class TableRenderer {
           column.style = style;
 
           if (style.alias) {
-            column.title = column.text.replace(regex, style.alias);
+            column.title = textUtil.escapeHtml(column.text.replace(regex, style.alias));
           }
 
           break;
@@ -300,7 +300,7 @@ export class TableRenderer {
       const cellLink = this.templateSrv.replace(column.style.linkUrl, scopedVars, encodeURIComponent);
       const sanitizedCellLink = textUtil.sanitizeUrl(cellLink);
 
-      const cellLinkTooltip = this.templateSrv.replace(column.style.linkTooltip, scopedVars);
+      const cellLinkTooltip = textUtil.escapeHtml(this.templateSrv.replace(column.style.linkTooltip, scopedVars));
       const cellTarget = column.style.linkTargetBlank ? '_blank' : '';
 
       cellClasses.push('table-panel-cell-link');

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

7

News mentions

0

No linked articles in our index yet.