Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-21722

Опубликовано: 12 фев. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange.

This did not leak any annotations that would not otherwise be visible on the public dashboard.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
Версия от 9.3.0 (включая) до 11.6.10 (исключая)
cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
Версия от 12.0.0 (включая) до 12.1.6 (исключая)
cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
Версия от 12.2.0 (включая) до 12.2.4 (включая)
cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
Версия от 12.3.0 (включая) до 12.3.2 (включая)
cpe:2.3:a:grafana:grafana:11.6.10:-:*:*:*:*:*:*
cpe:2.3:a:grafana:grafana:12.1.6:-:*:*:*:*:*:*
cpe:2.3:a:grafana:grafana:12.2.4:-:*:*:*:*:*:*
cpe:2.3:a:grafana:grafana:12.3.2:-:*:*:*:*:*:*

EPSS

Процентиль: 2%
0.00013
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200
CWE-863

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 месяца назад

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.

CVSS3: 5.3
redhat
около 1 месяца назад

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.

CVSS3: 5.3
debian
около 1 месяца назад

Public dashboards with annotations enabled did not limit their annotat ...

CVSS3: 5.3
github
около 1 месяца назад

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.

CVSS3: 5.3
fstec
около 1 месяца назад

Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с раскрытием информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 2%
0.00013
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200
CWE-863