Information Disclosure
github.com/grafana/grafana is vulnerable to information disclosure. The attack is possible because it does not securely store the passwords for data sources, allowing a user with administrative privilege to disclose the passwords by pressing the "Save and test" button within a data source's...