Grafana — свободная программная система визуализации данных, ориентированная на данные систем ИТ-мониторинга.

Grafana folders admin only permission privilege escalation

Grafana Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins

Grafana when using email as a username can block other users from signing in

Grafana Email addresses and usernames can not be trusted

Grafana User enumeration via forget password

Grafana Spoofing originalUrl of snapshots

Grafana Race condition allowing privilege escalation

Grafana Escalation from admin to server admin when auth proxy is used

Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins

Grafana Plugin signature bypass