Lucene search
+L

CVE-2023-4822

🗓️ 16 Oct 2023 08:45:59Reported by GRAFANAType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 454 Views

Grafana vulnerability allows Organization Admin to change permissions globall

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
alpinelinux
AlpineLinux
CVE-2023-4822
16 Oct 202309:15
–alpinelinux
bdu_fstec
BDU FSTEC
Grafana Privilege Escalation
4 Apr 202400:00
–bdu_fstec
circl
Circl
CVE-2023-4822
14 Feb 202509:46
–circl
cnnvd
CNNVD
Grafana Security Vulnerabilities
16 Oct 202300:00
–cnnvd
cvelist
Cvelist
CVE-2023-4822
16 Oct 202308:45
–cvelist
euvd
EUVD
EUVD-2023-2733
3 Oct 202520:07
–euvd
github
Github Security Blog
Grafana privilege escalation vulnerability
16 Oct 202309:30
–github
grafana
Grafana
Privilege Escalation in Organizations in Grafana
12 Oct 202300:00
–grafana
nessus
Tenable Nessus
Grafana Labs Security Bypass (CVE-2023-4822)
1 Nov 202300:00
–nessus
nessus
Tenable Nessus
RHEL 8 / 9 : Red Hat Ceph Storage 7.1 (RHSA-2024:3925)
14 Jun 202400:00
–nessus
Rows per page
NVD
Node
OR
grafanagrafanaRange8.0.0–9.4.16enterprise
grafanagrafanaRange9.5.0–9.5.11enterprise
grafanagrafanaRange10.0.0–10.0.7enterprise
grafanagrafanaRange10.1.0–10.1.3enterprise
grafanagrafanaMatch10.1.4enterprise
[
  {
    "defaultStatus": "unaffected",
    "product": "Grafana Enterprise",
    "vendor": "Grafana",
    "versions": [
      {
        "lessThan": "9.4.16",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "9.5.11",
        "status": "affected",
        "version": "9.5.0",
        "versionType": "semver"
      },
      {
        "lessThan": "10.0.7",
        "status": "affected",
        "version": "10.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "10.1.3",
        "status": "affected",
        "version": "10.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:38Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.16.7 - 7.2
EPSS0.01264
SSVC
454