Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6676-9pqr-4cw3

Опубликовано: 17 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

Grafana is an open-source platform for monitoring and observability.

In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so that the instance doesn’t call specific hosts.

However, the restriction can be bypassed used punycode encoding of the characters in the request address.

Grafana is an open-source platform for monitoring and observability.

In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so that the instance doesn’t call specific hosts.

However, the restriction can be bypassed used punycode encoding of the characters in the request address.

EPSS

Процентиль: 17%
0.00053
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-183

Связанные уязвимости

CVSS3: 6.6
ubuntu
больше 1 года назад

Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so that the instance doesn’t call specific hosts. However, the restriction can be bypassed used punycode encoding of the characters in the request address.

CVSS3: 6.6
nvd
больше 1 года назад

Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so that the instance doesn’t call specific hosts. However, the restriction can be bypassed used punycode encoding of the characters in the request address.

CVSS3: 6.6
debian
больше 1 года назад

Grafana is an open-source platform for monitoring and observability. ...

CVSS3: 7.2
fstec
больше 1 года назад

Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с недостатками списка контроля доступом (ACL), позволяющая нарушителю обойти существующие ограничения доступа

CVSS3: 9.8
redos
около 1 года назад

Множественные уязвимости grafana

EPSS

Процентиль: 17%
0.00053
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-183