CVE-2024-10452

CVE-2024-10452 affects Grafana (open‑source platform). The issue allows Organization administrators to delete pending invites in an organization they are not part of, representing an Authorization Bypass/Improper Access protection described in the connected advisories. Exploitation details are no...

CVE-2024-10452: Authorization Bypass Through User-Controlled Key

Organization admins can delete pending invites created in an organization they are not part of...

Org admin can delete pending invites in different org

Organization admins can delete pending invites created in an organization they are not part of...