Grafana — свободная программная система визуализации данных, ориентированная на данные систем ИТ-мониторинга.
Релизный цикл, информация об уязвимостях
График релизов
Количество 574
GHSA-p978-56hq-r492
Grafana folders admin only permission privilege escalation
GHSA-x744-mm8v-vpgr
Grafana Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins
GHSA-gj7m-853r-289r
Grafana when using email as a username can block other users from signing in
GHSA-2x6g-h2hg-rq84
Grafana Email addresses and usernames can not be trusted
GHSA-3p62-42x7-gxg5
Grafana User enumeration via forget password
GHSA-4724-7jwc-3fpw
Grafana Spoofing originalUrl of snapshots
GHSA-vqc4-mpj8-jxch
Grafana Race condition allowing privilege escalation
GHSA-ff5c-938w-8c9q
Grafana Escalation from admin to server admin when auth proxy is used
GHSA-jv32-5578-pxjc
Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
GHSA-rhxj-gh46-jvw8
Grafana Plugin signature bypass
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-p978-56hq-r492 Grafana folders admin only permission privilege escalation | CVSS3: 7.6 | 1% Низкий | около 2 лет назад |
| GHSA-x744-mm8v-vpgr Grafana Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins | CVSS3: 6.8 | 1% Низкий | около 2 лет назад |
| GHSA-gj7m-853r-289r Grafana when using email as a username can block other users from signing in | CVSS3: 4.3 | 1% Низкий | около 2 лет назад |
| GHSA-2x6g-h2hg-rq84 Grafana Email addresses and usernames can not be trusted | CVSS3: 6.4 | 1% Низкий | около 2 лет назад |
| GHSA-3p62-42x7-gxg5 Grafana User enumeration via forget password | CVSS3: 6.7 | 1% Низкий | около 2 лет назад |
| GHSA-4724-7jwc-3fpw Grafana Spoofing originalUrl of snapshots | CVSS3: 6.7 | 1% Низкий | около 2 лет назад |
| GHSA-vqc4-mpj8-jxch Grafana Race condition allowing privilege escalation | CVSS3: 9.8 | 1% Низкий | около 2 лет назад |
| GHSA-ff5c-938w-8c9q Grafana Escalation from admin to server admin when auth proxy is used | CVSS3: 6.6 | 1% Низкий | около 2 лет назад |
| GHSA-jv32-5578-pxjc Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins | CVSS3: 4.9 | 1% Низкий | около 2 лет назад |
| GHSA-rhxj-gh46-jvw8 Grafana Plugin signature bypass | CVSS3: 6.1 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу