Логотип exploitDog
bind:"CVE-2020-27846" OR bind:"CVE-2020-24303"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2020-27846" OR bind:"CVE-2020-24303"

Количество 9

Количество 9

oracle-oval логотип

ELSA-2021-1859

около 4 лет назад

ELSA-2021-1859: grafana security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий
redhat логотип

CVE-2020-27846

больше 4 лет назад

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS3: 9.8
EPSS: Средний
nvd логотип

CVE-2020-27846

больше 4 лет назад

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS3: 9.8
EPSS: Средний
ubuntu логотип

CVE-2020-24303

больше 4 лет назад

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2020-24303

около 5 лет назад

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2020-24303

больше 4 лет назад

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2020-24303

больше 4 лет назад

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the Elast ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-4hq8-gmxx-h6w9

почти 4 года назад

XML Processing error in github.com/crewjam/saml

CVSS3: 9.8
EPSS: Средний
github логотип

GHSA-mvpr-q6rh-8vrp

около 3 лет назад

Grafana XSS via a query alias for the ElasticSearch datasource

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
oracle-oval логотип
ELSA-2021-1859

ELSA-2021-1859: grafana security, bug fix, and enhancement update (MODERATE)

около 4 лет назад
redhat логотип
CVE-2020-27846

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS3: 9.8
15%
Средний
больше 4 лет назад
nvd логотип
CVE-2020-27846

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS3: 9.8
15%
Средний
больше 4 лет назад
ubuntu логотип
CVE-2020-24303

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS3: 6.1
1%
Низкий
больше 4 лет назад
redhat логотип
CVE-2020-24303

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS3: 6.1
1%
Низкий
около 5 лет назад
nvd логотип
CVE-2020-24303

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS3: 6.1
1%
Низкий
больше 4 лет назад
debian логотип
CVE-2020-24303

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the Elast ...

CVSS3: 6.1
1%
Низкий
больше 4 лет назад
github логотип
GHSA-4hq8-gmxx-h6w9

XML Processing error in github.com/crewjam/saml

CVSS3: 9.8
15%
Средний
почти 4 года назад
github логотип
GHSA-mvpr-q6rh-8vrp

Grafana XSS via a query alias for the ElasticSearch datasource

CVSS3: 6.1
1%
Низкий
около 3 лет назад

Уязвимостей на страницу