Medium severity5.4NVD Advisory· Published May 24, 2020· Updated Jun 17, 2026
CVE-2020-13429
CVE-2020-13429
Description
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option.
Affected products
7cpe:2.3:a:grafana:piechart-panel:*:*:*:*:*:grafana:*:*+ 1 more
- cpe:2.3:a:grafana:piechart-panel:*:*:*:*:*:grafana:*:*range: <1.5.0
- (no CPE)range: <1.5.0
- Grafana/piechart-paneldescription
- osv-coords4 versionspkg:rpm/opensuse/grafana-piechart-panel&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/grafana-piechart-panel&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/grafana-piechart-panel&distro=openSUSE%20Tumbleweedpkg:rpm/suse/grafana-piechart-panel&distro=SUSE%20Enterprise%20Storage%206
< 1.6.1-lp152.2.6.1+ 3 more
- (no CPE)range: < 1.6.1-lp152.2.6.1
- (no CPE)range: < 1.6.1-3.6.1
- (no CPE)range: < 1.6.1-2.2
- (no CPE)range: < 1.6.1-3.3.1
Patches
Vulnerability mechanics
References
2- github.com/grafana/piechart-panel/issues/218nvdIssue TrackingThird Party Advisory
- github.com/grafana/piechart-panel/releases/tag/v1.5.0nvdRelease NotesThird Party Advisory
News mentions
0No linked articles in our index yet.