{"id":"CVE-2020-13430","aliases":["BIT-grafana-2020-13430","GHSA-7m2x-qhrq-rp8h","GO-2024-2515"],"url":"https://o3.security/vulnerability/CVE-2020-13430","summary":"Grafana XSS via the OpenTSDB datasource","details":"Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.","published":"2020-05-24T18:15:10.097Z","modified":"2026-07-09T00:21:12.786451Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"github.com/grafana/grafana","fixedVersion":"7.0.0"}],"fix":{"url":"https://github.com/grafana/grafana/pull/24539","label":"grafana/grafana#24539"},"references":[{"type":"ADVISORY","url":"https://github.com/grafana/grafana/releases/tag/v7.0.0"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20200528-0003/"},{"type":"FIX","url":"https://github.com/grafana/grafana/pull/24539"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T00:21:12.786451Z"}}