Количество 15
Количество 15
CVE-2023-3128
Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.
CVE-2023-3128
Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.
CVE-2023-3128
Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.
CVE-2023-3128
Grafana is validating Azure AD accounts based on the email claim. On ...
RLSA-2023:4030
Critical: grafana security update
GHSA-mpv3-g8m3-3fjc
Grafana vulnerable to Authentication Bypass by Spoofing
ELSA-2023-6972
ELSA-2023-6972: grafana security and enhancement update (MODERATE)
ELSA-2023-4030
ELSA-2023-4030: grafana security update (CRITICAL)
BDU:2023-03343
Уязвимость веб-инструмента представления данных Grafana, связанная с обходом аутентификации посредством спуфинга, позволяющая нарушителю получить полный доступ к учетной записи пользователя
SUSE-SU-2023:2917-1
Security update for SUSE Manager Client Tools
SUSE-SU-2025:0545-1
Security update for grafana
SUSE-SU-2025:0525-1
Security update for SUSE Manager Client Tools
ALT-PU-2023-4148
ALT-PU-2023-4148: package `grafana` update to version 9.5.5-alt1
ROS-20240404-01
Множественные уязвимости grafana
ALT-PU-2023-4133
ALT-PU-2023-4133: package `grafana` update to version 9.5.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-3128 Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app. | CVSS3: 9.4 | 4% Низкий | больше 3 лет назад |
 | CVE-2023-3128 Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app. | CVSS3: 9.8 | 4% Низкий | больше 3 лет назад |
 | CVE-2023-3128 Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app. | CVSS3: 9.4 | 4% Низкий | больше 3 лет назад |
| CVE-2023-3128 Grafana is validating Azure AD accounts based on the email claim. On ... | CVSS3: 9.4 | 4% Низкий | больше 3 лет назад |
 | RLSA-2023:4030 Critical: grafana security update | 4% Низкий | около 3 лет назад | |
| GHSA-mpv3-g8m3-3fjc Grafana vulnerable to Authentication Bypass by Spoofing | CVSS3: 9.4 | 4% Низкий | больше 3 лет назад |
| ELSA-2023-6972 ELSA-2023-6972: grafana security and enhancement update (MODERATE) | 4% Низкий | почти 3 года назад | |
| ELSA-2023-4030 ELSA-2023-4030: grafana security update (CRITICAL) | 4% Низкий | около 3 лет назад | |
 | BDU:2023-03343 Уязвимость веб-инструмента представления данных Grafana, связанная с обходом аутентификации посредством спуфинга, позволяющая нарушителю получить полный доступ к учетной записи пользователя | CVSS3: 9.4 | 4% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:2917-1 Security update for SUSE Manager Client Tools | около 3 лет назад | ||
| SUSE-SU-2025:0545-1 Security update for grafana | больше 1 года назад | ||
| SUSE-SU-2025:0525-1 Security update for SUSE Manager Client Tools | больше 1 года назад | ||
| ALT-PU-2023-4148 ALT-PU-2023-4148: package `grafana` update to version 9.5.5-alt1 | CVSS3: 9.8 | около 3 лет назад | |
 | ROS-20240404-01 Множественные уязвимости grafana | CVSS3: 9.4 | больше 2 лет назад | |
| ALT-PU-2023-4133 ALT-PU-2023-4133: package `grafana` update to version 9.5.5-alt1 | CVSS3: 9.8 | около 3 лет назад |
Уязвимостей на страницу