Moderate: Red Hat Security Advisory: grafana security, bug fix, and enhancement update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

PT-2022-23525

Name of the Vulnerable Software and Affected Versions influxDB versions prior to 1.8.10 Description The issue concerns the lack of an authentication mechanism or controls in influxDB, allowing unauthenticated attackers to execute arbitrary commands. This could potentially expose data to any...

Cross-site Scripting (XSS)

github.com/influxdata/influxdb is vulnerable to cross-site scripting XSS. The attack exists due to lack of validation of input value to the Write Data module, allowing an attacker to inject malicious script...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

DEBIAN-CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

UBUNTU-CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

Cross site scripting

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

CVE-2018-17572 affects InfluxDB 0.9.5 with a Reflected XSS in the Write Data module (and related admin panel exposure via Write Data). The connected sources corroborate XSS in the Write Data path rather than other components; no other versions or root-cause details are provided in these documents...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

Kubernetes: Grafana Improper authorization

Summary: new report from part2. wrong configuration causes Grafana datasource to use root userwith influxdb admin priv. Component Version: test-infra:master Steps To Reproduce: in normally configuration read-only user used by grafana, but in my test i found datasource user wite admin perms. refer...

AZL-41158 CVE-2019-0205 affecting package influxdb for versions less than 2.7.3-4

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

Fedora Update for grafana FEDORA-2019-77d612eab4

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for grafana FEDORA-2019-0bb6b876da

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: grafana-6.3.4-1.fc29

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

[SECURITY] Fedora 30 Update: grafana-6.3.4-1.fc30

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

Grafana Access Control Error Vulnerability

Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. An access control error vulnerability exists in Grafana, which can be exploited by an...

Influxdb Authentication Bypass Vulnerability

InfluxDB is an open source temporal database developed by InfluxData. Influxdb suffers from an authentication bypass vulnerability that can be exploited by an attacker to gain control of the database and arbitrarily perform add, delete, or change operations...