2 matches found
grafana: email addresses and usernames cannot be trusted
An authentication bypass flaw was discovered in Grafana. This issue could allow a remote unauthenticated attacker to create an account and provide access to a certain organization, which can be exploited by gaining access to the signup link. The highest impacts to the system are confidentiality a...
8.1CVSS7.4AI score0.00726EPSS
SaveExploits0References5
CVE-2022-39306
An authentication bypass flaw was discovered in Grafana. This issue could allow a remote unauthenticated attacker to create an account and provide access to a certain organization, which can be exploited by gaining access to the signup link. The highest impacts to the system are confidentiality a...
9.8CVSS5AI score0.01004EPSS
SaveExploits0References4
20