grafana / piechart-panel

Pie Chart Panel Plugin
MIT License
151 stars 101 forks source link

XSS flaw in piechart panel #218

Closed simonc6372 closed 4 years ago

simonc6372 commented 4 years ago

The pie-chart panel is potentially vulnerable to XSS scripting as it processes any javascript in the "Values Header" configuration option. e.g.
<img src=/ onerror=alert('piechart_XSS')>

image