The vulnerability of the API proxy server of the data source platform for Grafana’s monitoring and observation allows a malicious actor to gain unauthorized access to read the GET endpoints in the Alertmanager and Prometheus data sources.

The vulnerability of the API proxy server of the data source platform for Grafana relates to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read GET requests directed at the final endpoints in the Alertmanager and...

BIT-GRAFANA-2025-3454

This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily...

Grafana's datasource proxy API allows authorization checks to be bypassed

This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily...