Grafana allows unauthenticated and authenticated users to view and delete snapshots, resulting in complete data loss. Resolved in versions 8.1.6 and 7.5.11
Reporter | Title | Published | Views | Family All 63 |
---|---|---|---|---|
OSV | Authentication bypass for viewing and deletions of snapshots | 5 Oct 202120:24 | â | osv |
OSV | Important: grafana security update | 12 Oct 202110:35 | â | osv |
OSV | CVE-2021-39226 | 5 Oct 202118:15 | â | osv |
OSV | grafana-7.5.11-3.1 on GA media | 15 Jun 202400:00 | â | osv |
OSV | Red Hat Security Advisory: grafana security update | 18 Sep 202405:54 | â | osv |
OSV | BIT-grafana-2021-39226 | 6 Mar 202410:59 | â | osv |
OSV | Red Hat Security Advisory: grafana security update | 18 Sep 202405:54 | â | osv |
OSV | Red Hat Security Advisory: grafana security update | 18 Sep 202405:54 | â | osv |
Prion | Design/Logic Flaw | 5 Oct 202118:15 | â | prion |
Veracode | Authentication Bypass | 6 Oct 202102:50 | â | veracode |
[
{
"product": "grafana",
"vendor": "grafana",
"versions": [
{
"status": "affected",
"version": ">= 8.0.0, < 8.1.6"
},
{
"status": "affected",
"version": "< 7.5.11"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo