SUSE CVE-2022-23498

Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including grafanasession. As a result, any user that queries a datasource where the caching is enabled can acquire another user's session. To mitigate the...

PT-2023-1578

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 9.2.10 Grafana versions prior to 9.3.4 Description The issue is related to the caching of datasource queries in Grafana, which includes caching of the grafana session header. This allows any user querying a datasource...