CVE-2023-0507

CVE-2023-0507 is a stored Cross-Site Scripting (XSS) vulnerability in Grafana's core GeoMap plugin, affecting versions starting from 8.1. This flaw allows an attacker with Editor role privileges to inject malicious JavaScript into map attributions, leading to arbitrary code execution in the context of other users. The vulnerability has a CVSS score of 5.4 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and potentially leading to limited confidentiality and integrity impacts. While the EPSS and FAUCET Risk Score suggest a higher potential for exploitation, there is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.