Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mjv-w43g-3xj4

Опубликовано: 13 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.

EPSS

Процентиль: 25%
0.00328
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 6.5
ubuntu
3 месяца назад

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.

CVSS3: 6.5
redhat
3 месяца назад

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.

CVSS3: 6.5
nvd
3 месяца назад

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.

CVSS3: 6.5
debian
3 месяца назад

The Grafana Live push endpoint can be exploited to cause unbounded mem ...

CVSS3: 6.5
fstec
3 месяца назад

Уязвимость системы обмена сообщениями в режиме реального времени Grafana Live платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 25%
0.00328
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-770