Lucene search
+L

12 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/07/09 12:01 a.m.•11 views

Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/07/09 12:01 a.m.•3 views

Malware in grafana-json-datasource

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/07/09 12:01 a.m.•9 views

MAL-2025-5698 Malicious code in grafana-json-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df63e5033b70f866f957f8443b533f09684b459897700f9ed44542d23b8fe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:39 a.m.•16 views

CVE-2023-5123

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS7.1AI score0.0077EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/14 3:15 p.m.•14 views

CVE-2023-5123

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS7.9AI score0.0077EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/14 3:15 p.m.•38 views

Path traversal

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a...

6CVSS7.5AI score0.0077EPSS
SaveExploits0References1
Mend
Mend
•added 2024/02/14 3:06 p.m.•2 views

CVE-2023-5123

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8.6CVSS0.0077EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/02/14 3:06 p.m.•31 views

CVE-2023-5123 Improper Path Sanitization in JSON Datasource Plugin

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS8AI score0.0077EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/02/14 3:06 p.m.•7 views

CVE-2023-5123 Improper Path Sanitization in JSON Datasource Plugin

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS7.3AI score0.0077EPSS
SaveExploits0References2
CVE
CVE
•added 2024/02/14 3:06 p.m.•105 views

CVE-2023-5123

CVE-2023-5123 affects the Grafana JSON datasource plugin (Marcus Olsson) used to fetch JSON data from a configured remote endpoint. The root cause is inadequate sanitization of the dashboard-supplied path parameter, allowing path traversal characters (../) to escape the configured sub-path and ta...

8CVSS7.7AI score0.0077EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•7 views

CVE-2023-5123: Improper Limitation of a Pathname to a Restricted Directory

The JSON datasource plugin https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate...

8CVSS6.3AI score0.0077EPSS
SaveExploits0References2
Grafana
Grafana
•added 2024/02/14 12:00 a.m.•32 views

Path Traversal in JSON Plugin in Grafana

Grafana is an open-source platform for monitoring and observability. The JSON datasource plugin is a Grafana Labs maintained plugin that allows for retrieving and processing JSON data from a remote endpoint including a specific sub-path configured by an administrator. Due to inadequate sanitizati...

8CVSS5.9AI score0.0077EPSS
SaveExploits0
Rows per page
Query Builder