Поиск уязвимостей
Количество 8
Количество 8
BDU:2026-12021
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии
CVE-2026-28378
The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers.
CVE-2026-28378
The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers.
ALT-PU-2026-6577
ALT-PU-2026-6577: package `grafana` update to version 12.3.6-alt1
ALT-PU-2026-15352
ALT-PU-2026-15352: package `grafana` update to version 12.3.6-alt1
ROS-20260728-80-0008
Уязвимость grafana
ROS-20260728-73-0008
Уязвимость grafana
GHSA-x94r-qqxh-wpj5
The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-12021 Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии | CVSS3: 2.7 | 0% Низкий | 4 месяца назад |
 | CVE-2026-28378 The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers. | CVSS3: 3.1 | 0% Низкий | 4 месяца назад |
 | CVE-2026-28378 The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers. | CVSS3: 2.7 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-6577 ALT-PU-2026-6577: package `grafana` update to version 12.3.6-alt1 | CVSS3: 9.1 | 7 месяцев назад | |
| ALT-PU-2026-15352 ALT-PU-2026-15352: package `grafana` update to version 12.3.6-alt1 | CVSS3: 10 | около 2 месяцев назад | |
 | ROS-20260728-80-0008 Уязвимость grafana | CVSS3: 2.7 | 0% Низкий | 3 месяца назад |
| ROS-20260728-73-0008 Уязвимость grafana | CVSS3: 2.7 | 0% Низкий | 3 месяца назад |
| GHSA-x94r-qqxh-wpj5 The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers. | CVSS3: 3.1 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу