Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-1132

Высокий

ALT-PU-2023-1132: package grafana update to version 9.3.4-alt1

Источник
errata.altlinux.org
Дата публикации
26.01.2023
Дата обновления
04.02.2026
Устраненные уязвимости
6

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades grafana to version 9.3.4-alt1.

Устраненные уязвимости6

Связанные уязвимости

CVSS3: 9.4
redos
больше 2 лет назад

Множественные уязвимости grafana

CVSS3: 8.8
ubuntu
почти 4 года назад

Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.

CVSS3: 8.8
redhat
почти 4 года назад

Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.

CVSS3: 8.8
nvd
почти 4 года назад

Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.

CVSS3: 8.8
debian
почти 4 года назад

Grafana is an open-source platform for monitoring and observability. W ...