EUVD-2023-57461

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Grafana JSON datasource plugin allows path traversal, risking unauthorized access and privilege escalation.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-5123	10 Jan 202513:07	–	circl
CNNVD	Grafana Security Vulnerabilities	14 Feb 202400:00	–	cnnvd
CVE	CVE-2023-5123	14 Feb 202415:06	–	cve
Cvelist	CVE-2023-5123 Improper Path Sanitization in JSON Datasource Plugin	14 Feb 202415:06	–	cvelist
Grafana	Improper Path Sanitization in JSON Datasource Plugin	14 Feb 202400:00	–	grafana
NVD	CVE-2023-5123	14 Feb 202415:15	–	nvd
OSV	CVE-2023-5123	14 Feb 202415:15	–	osv
Prion	Path traversal	14 Feb 202415:15	–	prion
Positive Technologies	PT-2024-14076	14 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-5123	23 May 202502:39	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "38c1de1a-59c1-3b85-b1af-e6fcea6a314e",
        "vendor": {
          "name": "Grafana"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "b7f807af-782a-39dc-b9f4-e9d34a72b066",
        "product": {
          "name": "grafana-json-datasource"
        },
        "product_version": "0.2.0 <1.3.21"
      }
    ]
  }
]

Source	Link
grafana	www.grafana.com/security/security-advisories/cve-2023-5123/
security	www.security.netapp.com/advisory/ntap-20240503-0007/

03 Oct 2025 20:07Current

7.8High risk

Vulners AI Score7.8

CVSS 3.18

EPSS0.00514

SSVC