Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7g92-g4vh-hp84

Опубликовано: 26 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

EPSS

Процентиль: 7%
0.00025
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 5.4
ubuntu
3 дня назад

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

CVSS3: 5.4
redhat
6 дней назад

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

CVSS3: 5.4
nvd
6 дней назад

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

CVSS3: 5.4
debian
6 дней назад

A vulnerability has been discovered in Grafana OSS where an authorizat ...

EPSS

Процентиль: 7%
0.00025
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-285