Lucene search
K

7 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/10 6:58 a.m.3 views

Malicious code in grafana-csv-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ad716a5ea97debbbad7d3b10d1b4a28c71a2e2b1143a6733443cc211de350f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2025/07/10 6:58 a.m.1 views

MAL-2025-5777 Malicious code in grafana-csv-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ad716a5ea97debbbad7d3b10d1b4a28c71a2e2b1143a6733443cc211de350f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2024/10/24 7:10 a.m.128 views

BIT-GRAFANA-2023-5122 SSRF in CSV Datasource Plugin

Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this plugin was configured to send requests t...

5.3CVSS5AI score0.00225EPSS
Exploits0References3
Veracode
Veracode
added 2024/02/22 12:28 p.m.17 views

Server Side Request Forgery (SSRF)

github.com/grafana/grafana-csv-datasource is vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to improper validation of user input, allowing attackers to craft requests to endpoints within the local network...

5.3CVSS6.9AI score0.00225EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/14 3:6 p.m.11 views

CVE-2023-5122 SSRF in CSV Datasource Plugin

Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this plugin was configured to send requests t...

5CVSS5.1AI score0.00225EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/14 12:0 a.m.1 views

Grafana Code Issue Vulnerability

Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. Grafana has a security vulnerability that stems from a CSV datasource plugin that...

5.3CVSS6.9AI score0.00225EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.3 views

PT-2024-14075 · Grafana · Grafana

Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: The issue concerns the CSV datasource plugin, a Grafana Labs maintained plugin for Grafana, which allows retrieving and processing CSV data from a remote endpoint configured by an...

5.3CVSS6.7AI score0.00225EPSS
Exploits0References8
Rows per page
Query Builder