Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GO-2024-2867
HistoryJun 05, 2024 - 3:10 p.m.

Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

2024-06-0515:10:42
Google
osv.dev
4
grafana
snapshots
originalurl
spoofing
github

6.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

4.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%

JSON

Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Related

osv 4
cgr 1
nvd 1
prion 1
ubuntucve 1
nessus 6
cve 1
github 1
veracode 1
cvelist 1
ibm 2
freebsd 2
redhatcve 2
openvas 3
redhat 2
almalinux 1
oraclelinux 1
redos 1
osv
osv
BIT-grafana-2022-39324
2024-03-06 10:54:38
CVE-2022-39324
2023-01-27 23:15:08
Grafana Spoofing originalUrl of snapshots
2024-05-14 22:29:26
cgr
cgr
CVE-2022-39324 vulnerabilities
2024-05-19 03:07:16
nvd
nvd
CVE-2022-39324
2023-01-27 23:15:08
prion
prion
Open redirect
2023-01-27 23:15:00
ubuntucve
ubuntucve
CVE-2022-39324
2023-01-27 00:00:00
nessus
nessus
FreeBSD : Grafana -- Spoofing originalUrl of snapshots (e6281d88-a7a7-11ed-8d6a-6c3be5272acd)
2023-02-09 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2023:0821-1)
2023-03-22 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:0812-1)
2023-03-22 00:00:00
cve
cve
CVE-2022-39324
2023-01-27 23:15:08
github
github
Grafana Spoofing originalUrl of snapshots
2024-05-14 22:29:26
veracode
veracode
Cross-Site Scripting (XSS)
2023-02-07 05:46:55
cvelist
cvelist
CVE-2022-39324 Grafana vulnerable to spoofing originalUrl of snapshots
2023-01-27 22:42:01
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Cross Site Scripting in Grafana (CVE-2022-39324)
2024-01-18 14:30:03
Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.
2023-04-11 11:47:27
freebsd
freebsd
Grafana -- Stored XSS in ResourcePicker component
2022-12-16 00:00:00
Grafana -- Spoofing originalUrl of snapshots
2023-01-25 00:00:00
redhatcve
redhatcve
CVE-2022-39324
2023-01-30 13:05:33
CVE-2022-23552
2023-01-30 13:35:45
openvas
openvas
Grafana 8.1.0 < 9.2.10, 9.3.0 < 9.3.4 XSS Vulnerability (GHSA-8xmm-x63g-f6xv)
2023-01-30 00:00:00
Grafana 8.x < 9.2.10, 9.3.0 < 9.3.4 Spoofing Vulnerability (GHSA-4724-7jwc-3fpw)
2023-01-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0812-1)
2023-03-28 00:00:00
redhat
redhat
(RHSA-2023:6420) Moderate: grafana security and enhancement update
2023-11-07 06:05:17
(RHSA-2023:3642) Important: Red Hat Ceph Storage 6.1 Container security and bug fix update
2023-06-15 15:57:53
almalinux
almalinux
Moderate: grafana security and enhancement update
2023-11-07 00:00:00
oraclelinux
oraclelinux
grafana security and enhancement update
2023-11-11 00:00:00
redos
redos
ROS-20240404-01
2024-04-04 00:00:00

6.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

4.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%

JSON
Related for OSV:GO-2024-2867
osv4cgr1nvd1prion1ubuntucve1nessus6cve1github1veracode1cvelist1ibm2freebsd2redhatcve2openvas3redhat2almalinux1oraclelinux1redos1