influxdb:fuzzjsonweb: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5681665654128640 Project: influxdb Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsonweb Job Type: libfuzzerasaninfluxdb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000d663 Crash State: NULL Sanitizer: address ASAN Recommended...

Fedora: Security Advisory for grafana (FEDORA-2020-e6e81a03d6)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: grafana-6.7.4-1.fc32

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

[SECURITY] Fedora 31 Update: grafana-6.7.4-1.fc31

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

[SECURITY] Fedora 32 Update: grafana-6.7.3-1.fc32

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

[SECURITY] Fedora 31 Update: grafana-6.7.3-1.fc31

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

Moderate: Red Hat Security Advisory: grafana security, bug fix, and enhancement update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

PT-2022-23525

Name of the Vulnerable Software and Affected Versions influxDB versions prior to 1.8.10 Description The issue concerns the lack of an authentication mechanism or controls in influxDB, allowing unauthenticated attackers to execute arbitrary commands. This could potentially expose data to any...

Cross-site Scripting (XSS)

github.com/influxdata/influxdb is vulnerable to cross-site scripting XSS. The attack exists due to lack of validation of input value to the Write Data module, allowing an attacker to inject malicious script...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

DEBIAN-CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

UBUNTU-CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

Cross site scripting

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

CVE-2018-17572 affects InfluxDB 0.9.5 with a Reflected XSS in the Write Data module (and related admin panel exposure via Write Data). The connected sources corroborate XSS in the Write Data path rather than other components; no other versions or root-cause details are provided in these documents...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

Kubernetes: Grafana Improper authorization

Summary: new report from part2. wrong configuration causes Grafana datasource to use root userwith influxdb admin priv. Component Version: test-infra:master Steps To Reproduce: in normally configuration read-only user used by grafana, but in my test i found datasource user wite admin perms. refer...

AZL-41158 CVE-2019-0205 affecting package influxdb for versions less than 2.7.3-4

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...