BIT-GRAFANA-2023-1387

🗓️ 06 Mar 2024 10:53:58Reported by GoogleType

osv

osv🔗 osv.dev👁 33 Views

Grafana JWT authentication vulnerability in 9.1 branch

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in Grafana (CVE-2023-1387)	15 Apr 202502:12	–	ibm
FreeBSD	Grafana -- Exposure of sensitive information to an unauthorized actor	26 Apr 202300:00	–	freebsd
BDU FSTEC	The vulnerability of the Grafana monitoring and observation platform, related to the disclosure of confidential information to unauthorized entities, allows attackers to gain unauthorized access to protected information.	4 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-1387	26 Apr 202318:26	–	circl
CNNVD	Grafana 安全漏洞	26 Apr 202300:00	–	cnnvd
CNVD	Grafana Information Disclosure Vulnerability (CNVD-2023-36311)	4 May 202300:00	–	cnvd
CVE	CVE-2023-1387	26 Apr 202313:47	–	cve
Cvelist	CVE-2023-1387	26 Apr 202313:47	–	cvelist
EUVD	EUVD-2023-23643	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : Grafana -- Exposure of sensitive information to an unauthorized actor (5e257b0d-e466-11ed-834b-6c3be5272acd)	27 Apr 202300:00	–	nessus

Source	Link
github	www.github.com/grafana/bugbounty/security/advisories/GHSA-5585-m9r5-p86j
grafana	www.grafana.com/security/security-advisories/cve-2023-1387/
security	www.security.netapp.com/advisory/ntap-20230609-0003/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-1387

16 Mar 2026 03:05Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.14.2 - 7.5

EPSS0.01504

SSVC

grafana jwt authentication vulnerability data sources