Grafana Basic Authentication Bypass

The vulnerability of the basic authentication system for Grafana data visualization tools is related to deficiencies in the authorization mechanism when processing the verifyemailenabled parameter. Exploiting this vulnerability could allow unauthorized users to bypass email verification and preve...

CVE-2023-6152

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verifyemailenabled" will only validate email only on sign up...

CVE-2023-6152: Incorrect Authorization

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verifyemailenabled" will only validate email only on sign up...