27 matches found
Grafana OSS å®å Øę¼ę“
Grafana OSS is an open-source visualization dashboard developed by Grafana. There is a security vulnerability in Grafana OSS, which stems from the plugin resource endpointsā ability to read the entire request body into memory, leading to unlimited memory allocation. This could potentially cause...
Grafana OSS å®å Øę¼ę“
Grafana OSS is an open-source visualization dashboard developed by Grafana. There is a security vulnerability in Grafana OSS, which arises from the possibility of users continuing to perform operations within a short period after their token permissions for service accounts have been revoked. Thi...
CVE-2026-21724
A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission...
UBUNTU-CVE-2026-21724
A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission...
Grafana OSS å®å Øę¼ę“
Grafana OSS is an open-source visualization dashboard developed by Grafana. There is a security vulnerability in Grafana OSS, which stems from an authorization bypass in the configuration contact point API. This vulnerability could allow users with the Editor role to modify protected Webhook URLs...
CVE-2026-22640
...
EUVD-2025-21760
Malicious code in bioql PyPI...
EUVD-2025-21861
Malicious code in bioql PyPI...
EUVD-2025-21862
Malicious code in bioql PyPI...
BIT-GRAFANA-2025-6197
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...
CVE-2025-6023
An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...
CVE-2025-6197
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...
CVE-2025-6197
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...
CVE-2025-6197
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...
CVE-2025-6197
CVE-2025-6197 is an open redirect vulnerability in Grafana OSS organization switching functionality. The issue requires multiple organizations in a Grafana instance and a victim on a different organization from the one in the URL. Exploitation could allow redirecting users to arbitrary external d...
CVE-2025-6023
An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...
CVE-2025-6023
Grafana OSS is affected by CVE-2025-6023, an open redirect vulnerability introduced in v11.5.0 that can be chained with path traversal to trigger XSS in scripted dashboards. Affected component: Grafana open redirect in organization switching (also described as an open redirect in organization swi...
CVE-2025-6023
An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...
PT-2025-30013 Ā· GrafanaĀ +1 Ā· Grafana OssĀ +1
Name of the Vulnerable Software and Affected Versions: Grafana OSS affected versions not specified Description: An open redirect issue exists in the organization switching functionality of Grafana OSS. Successful exploitation requires multiple organizations to be present within the Grafana instan...
PT-2025-30012
Name of the Vulnerable Software and Affected Versions Grafana versions 11.3.8 through 11.6.3 Grafana versions 11.4.6 through 11.5.6 Grafana versions 11.5.0 through 11.5.6 Grafana versions prior to 12.0.2+security-01 Grafana versions prior to 1.9.2-0.20250521205822-0ba0b99665a9 Description Grafana...