Attachment 240517 Details for Bug 269903 – vuxml.patch

[patch] vuxml.patch

vuxml-grafana.diff (text/plain), 5.38 KB, created by Boris Korzun on 2023-03-01 19:13:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Boris Korzun

Created: 2023-03-01 19:13:30 UTC

Size: 5.38 KB

patch

obsolete

>diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml
>index 422c0246eb6e..11478535c90e 100644
>--- a/security/vuxml/vuln/2023.xml
>+++ b/security/vuxml/vuln/2023.xml
>@@ -1,3 +1,129 @@
>+ <vuln vid="6dccc186-b824-11ed-b695-6c3be5272acd">
>+ <topic>Grafana -- Stored XSS in text panel plugin</topic>
>+ <affects>
>+ <package>
>+	<name>grafana</name>
>+	<range><ge>9.2.0</ge><lt>9.2.10</lt></range>
>+	<range><ge>9.3.0</ge><lt>9.3.4</lt></range>
>+ </package>
>+ <package>
>+	<name>grafana9</name>
>+	<range><ge>9.2.0</ge><lt>9.2.10</lt></range>
>+	<range><ge>9.3.0</ge><lt>9.3.4</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Grafana Labs reports:
>+	<blockquote cite="https://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/">
>+	 During an internal audit of Grafana on January 1, a member of the security
>+	 team found a stored XSS vulnerability affecting the core text plugin.
>+	 The stored XSS vulnerability requires several user interactions in order
>+	 to be fully exploited. The vulnerability was possible due to Reactâs render
>+	 cycle that will pass through the unsanitized HTML code, but in the next cycle,
>+	 the HTML is cleaned up and saved in Grafanaâs database.
>+	 The CVSS score for this vulnerability is 6.4 Medium
>+	 (CVSS:6.4/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <cvename>CVE-2023-22462</cvename>
>+ <url>https://github.com/grafana/grafana/security/advisories/GHSA-7rqg-hjwc-6mjf</url>
>+ </references>
>+ <dates>
>+ <discovery>2023-01-01</discovery>
>+ <entry>2023-03-01</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="e7841611-b808-11ed-b695-6c3be5272acd">
>+ <topic>Grafana -- Stored XSS in TraceView panel</topic>
>+ <affects>
>+ <package>
>+	<name>grafana</name>
>+	<range><lt>8.5.21</lt></range>
>+	<range><ge>9.0.0</ge><lt>9.2.13</lt></range>
>+	<range><ge>9.3.0</ge><lt>9.3.8</lt></range>
>+ </package>
>+ <package>
>+	<name>grafana8</name>
>+	<range><lt>8.5.21</lt></range>
>+ </package>
>+ <package>
>+	<name>grafana9</name>
>+	<range><ge>9.0.0</ge><lt>9.2.13</lt></range>
>+	<range><ge>9.3.0</ge><lt>9.3.8</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Grafana Labs reports:
>+	<blockquote cite="https://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/">
>+	 During an internal audit of Grafana on January 30, a member
>+	 of the engineering team found a stored XSS vulnerability affecting
>+	 the <code>TraceView</code> panel.
>+	 The stored XSS vulnerability was possible because the value of a spanâs
>+	 attributes/resources were not properly sanitized, and this will be rendered
>+	 when the spanâs attributes/resources are expanded.
>+	 The CVSS score for this vulnerability is 7.3 High
>+	 (CVSS:7.3/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N).
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <cvename>CVE-2023-0594</cvename>
>+ <url>https://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/</url>
>+ </references>
>+ <dates>
>+ <discovery>2023-01-30</discovery>
>+ <entry>2023-03-01</entry>
>+ </dates>
>+ </vuln>
>+
>+ <vuln vid="e2a8e2bd-b808-11ed-b695-6c3be5272acd">
>+ <topic>Grafana -- Stored XSS in geomap panel plugin via attribution</topic>
>+ <affects>
>+ <package>
>+	<name>grafana</name>
>+	<range><lt>8.5.21</lt></range>
>+	<range><ge>9.0.0</ge><lt>9.2.13</lt></range>
>+	<range><ge>9.3.0</ge><lt>9.3.8</lt></range>
>+ </package>
>+ <package>
>+	<name>grafana8</name>
>+	<range><lt>8.5.21</lt></range>
>+ </package>
>+ <package>
>+	<name>grafana9</name>
>+	<range><ge>9.0.0</ge><lt>9.2.13</lt></range>
>+	<range><ge>9.3.0</ge><lt>9.3.8</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Grafana Labs reports:
>+	<blockquote cite="https://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/">
>+	 During an internal audit of Grafana on January 25, a member of the security
>+	 team found a stored XSS vulnerability affecting the core geomap plugin.
>+	 The stored XSS vulnerability was possible because map attributions werenât
>+	 properly sanitized, allowing arbitrary JavaScript to be executed in the context
>+	 of the currently authorized user of the Grafana instance.
>+	 The CVSS score for this vulnerability is 7.3 High
>+	 (CVSS:7.3/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N).
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <cvename>CVE-2023-0507</cvename>
>+ <url>https://grafana.com/blog/2023/02/28/grafana-security-release-new-versions-with-security-fixes-for-cve-2023-0594-cve-2023-0507-and-cve-2023-22462/</url>
>+ </references>
>+ <dates>
>+ <discovery>2023-01-25</discovery>
>+ <entry>2023-03-01</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="b17bce48-b7c6-11ed-b304-080027f5fec9">
> <topic>redis -- multiple vulnerabilities</topic>
> <affects>

Flags:

drtr0jan: maintainer-approval? (ports-secteam)

Actions: View | Diff

Attachments on bug 269903: 240515 | 240516 | 240517