Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ccq3-xjc6-g2c3

Опубликовано: 31 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key (broken access control).

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key (broken access control).

EPSS

Процентиль: 10%
0.00202
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.3
ubuntu
26 дней назад

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key (broken access control).

CVSS3: 6.3
nvd
26 дней назад

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key (broken access control).

EPSS

Процентиль: 10%
0.00202
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-862