1 matches found
grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
A flaw was found in Grafana's use of the GitLab data source plugin, leaking the API key to gitlab. This can result in the destination plugin receiving a Grafana user's authentication token, which could be used by an attacker...