Lucene search

PRIOn knowledge basePRION:CVE-2024-1442

HistoryMar 07, 2024 - 6:15 p.m.

Information disclosure

2024-03-0718:15:00

PRIOn knowledge base

www.prio-n.com

data source permissions

grafana api

uid

read access

query access

edit access

delete access

organization data sources

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *.
Doing this will grant the user access to read, query, edit and delete all data sources within the organization.

References

grafana.com/security/security-advisories/cve-2024-1442/