Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-2838

Низкий

ALT-PU-2018-2838: package grafana update to version 5.4.2-alt1

Источник
errata.altlinux.org
Дата публикации
13.12.2018
Дата обновления
04.02.2026
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades grafana to version 5.4.2-alt1.

Устраненные уязвимости2

Ссылки2

ALT-PU-2018-2838https://errata.altlinux.org/ALT-PU-2018-2838

GHSA-x5fh-fvvr-892f

https://github.com/advisories/GHSA-x5fh-fvvr-892f

Связанные уязвимости

ubuntu логотип

CVE-2018-19039

CVSS3: 6.5
ubuntu
почти 8 лет назад

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.

redhat логотип

CVE-2018-19039

CVSS3: 6.5
redhat
почти 8 лет назад

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.

nvd логотип

CVE-2018-19039

CVSS3: 6.5
nvd
почти 8 лет назад

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.

debian логотип

CVE-2018-19039

CVSS3: 6.5
debian
почти 8 лет назад

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated ...

ubuntu логотип

CVE-2018-1000816

CVSS3: 5.4
ubuntu
почти 8 лет назад

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where the payload was previously inserted..