Grafana — свободная программная система визуализации данных, ориентированная на данные систем ИТ-мониторинга.
Релизный цикл, информация об уязвимостях
График релизов
Количество 587
CVE-2023-6152
A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up.
GHSA-3hv4-r2fm-h27f
Email Validation Bypass And Preventing Sign Up From Email's Owner
CVE-2023-6152
A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up.
CVE-2023-6152
A user changing their email after signing up and verifying it can chan ...
CVE-2023-6152
A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up.
GHSA-8pjx-jj86-j47p
Grafana path traversal
GHSA-cmf4-h3xc-jw8w
Grafana Cross Site Request Forgery (CSRF)
GHSA-v5gq-qvjq-8p53
Grafana Cross-site Scripting (XSS)
GHSA-4pwp-cx67-5cpx
Grafana Arbitrary File Read
BDU:2025-02009
Уязвимость интерфейса платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2023-6152 A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up. | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
| GHSA-3hv4-r2fm-h27f Email Validation Bypass And Preventing Sign Up From Email's Owner | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
 | CVE-2023-6152 A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up. | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
| CVE-2023-6152 A user changing their email after signing up and verifying it can chan ... | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
 | CVE-2023-6152 A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up. | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
| GHSA-8pjx-jj86-j47p Grafana path traversal | CVSS3: 7.5 | 89% Высокий | больше 2 лет назад |
| GHSA-cmf4-h3xc-jw8w Grafana Cross Site Request Forgery (CSRF) | CVSS3: 6.8 | 2% Низкий | больше 2 лет назад |
| GHSA-v5gq-qvjq-8p53 Grafana Cross-site Scripting (XSS) | CVSS3: 6.1 | 2% Низкий | больше 2 лет назад |
| GHSA-4pwp-cx67-5cpx Grafana Arbitrary File Read | CVSS3: 6.5 | 4% Низкий | больше 2 лет назад |
 | BDU:2025-02009 Уязвимость интерфейса платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS) | CVSS3: 5.4 | больше 2 лет назад |
Уязвимостей на страницу