Lucene search
+L

1 matches found

Grafana
Grafana
added 2023/01/26 12:0 a.m.14 views

Spoofing originalUrl of snapshots

Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapshot and arbitrarily choose the originalUrl parameter by editing the query, thanks to a web proxy. When another user opens the URL of the snapshot, they will be...

6.7CVSS6.8AI score0.00828EPSS
SaveExploits0
Rows per page
Query Builder