Lucene search
K

9 matches found

OSV
OSV
added 2025/07/09 12:1 a.m.1 views

MAL-2025-5698 Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/09 12:1 a.m.3 views

Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:39 a.m.5 views

CVE-2023-5123

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS7.1AI score0.00514EPSS
Exploits0References1
NVD
NVD
added 2024/02/14 3:15 p.m.5 views

CVE-2023-5123

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS7.9AI score0.00514EPSS
Exploits0References2
Prion
Prion
added 2024/02/14 3:15 p.m.17 views

Path traversal

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a...

6CVSS7.5AI score0.00514EPSS
Exploits0References1
CVE
CVE
added 2024/02/14 3:6 p.m.69 views

CVE-2023-5123

CVE-2023-5123 affects the Grafana JSON datasource plugin (Marcus Olsson) used to fetch JSON data from a configured remote endpoint. The root cause is inadequate sanitization of the dashboard-supplied path parameter, allowing path traversal characters (../) to escape the configured sub-path and ta...

8CVSS7.9AI score0.00514EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/14 3:6 p.m.4 views

CVE-2023-5123 Improper Path Sanitization in JSON Datasource Plugin

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS7.3AI score0.00514EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/14 3:6 p.m.13 views

CVE-2023-5123 Improper Path Sanitization in JSON Datasource Plugin

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS8AI score0.00514EPSS
Exploits0References2
Grafana
Grafana
added 2024/02/14 12:0 a.m.2 views

Improper Path Sanitization in JSON Datasource Plugin

Grafana is an open-source platform for monitoring and observability. The JSON datasource plugin is a Grafana Labs maintained plugin that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate sanitizati...

8CVSS5.9AI score0.00514EPSS
Exploits0
Rows per page
Query Builder