Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-21724

Опубликовано: 26 мар. 2026
Источник: nvd
CVSS3: 5.4
EPSS Низкий

Описание

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

EPSS

Процентиль: 7%
0.00025
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 5.4
ubuntu
3 дня назад

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

CVSS3: 5.4
redhat
6 дней назад

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

CVSS3: 5.4
debian
6 дней назад

A vulnerability has been discovered in Grafana OSS where an authorizat ...

CVSS3: 5.4
github
6 дней назад

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

EPSS

Процентиль: 7%
0.00025
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-285