The vulnerability of the basic authentication system for Grafana’s data visualization tools allows attackers to bypass email verification and prevent legitimate owners of email addresses from registering.

The vulnerability of the basic authentication system for Grafana data visualization tools is related to deficiencies in the authorization mechanism when processing the verifyemailenabled parameter. Exploiting this vulnerability could allow unauthorized users to bypass email verification and preve...

CVE-2023-6152: Incorrect Authorization

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verifyemailenabled" will only validate email only on sign up...