CVE-2023-4822
Grafana privilege escalation vulnerability
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.
It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.
This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.
The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.
It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.
This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.
The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
- Record
CVE-2023-4822- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-269
- Updated
- 2026-11-02
EUVDEUVD-2023-2733
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.
It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.
This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.
The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
- Record
EUVD-2023-2733- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fw9c-75hh-89p6
Grafana privilege escalation vulnerability
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.
It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.
This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.
The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
- Record
GHSA-fw9c-75hh-89p6- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-269
- Updated
- 2026-11-02
NVD
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.
It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.
This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.
The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
- Record
CVE-2023-4822- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L - CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
OSV
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.
It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.
This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.
The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
- Record
CVE-2023-4822- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-269
- Updated
- 2026-11-02
OSVGHSA-fw9c-75hh-89p6
Grafana privilege escalation vulnerability
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.
It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.
This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.
The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
- Record
GHSA-fw9c-75hh-89p6- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-269
- Updated
- 2026-11-02
OSVRHSA-2024:3925
Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, enhancements, and bug fix update
- Record
RHSA-2024:3925- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-4822
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations. It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally. This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user. The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
- Record
UBUNTU-CVE-2023-4822- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L - CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBIT-grafana-2023-4822 No score
Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.
- Record
BIT-grafana-2023-4822- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/grafana/grafanaGo |
through 10.1.5 | None known |
grafanaBitnami |
8.0.0 up to 9.4.16, 9.5.0 up to 9.5.11, 10.0.0 up to 10.0.7, 10.1.0 up to 10.1.3, 10.1.4 to 10.1.4 | 9.4.169.5.1110.0.710.1.3 |
cephRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-baseRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-base-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-commonRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-common-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-debugsourceRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-exporter-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
Show 127 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ceph-fuseRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-fuse-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-immutable-object-cacheRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-immutable-object-cache-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-mds-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-mgr-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-mibRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-mon-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-osd-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-radosgw-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-resource-agentsRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-selinuxRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
ceph-test-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
cephfs-mirror-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
cephfs-topRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
libcephfs-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
libcephfs2Red Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
libcephfs2-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
libcephsqlite-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librados-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librados-devel-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librados2Red Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librados2-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
libradospp-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
libradosstriper1Red Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
libradosstriper1-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librbd-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librbd1Red Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librbd1-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librgw-develRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librgw2Red Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
librgw2-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-ceph-argparseRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-ceph-commonRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-cephfsRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-cephfs-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-radosRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-rados-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-rbdRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-rbd-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-rgwRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
python3-rgw-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
rbd-fuse-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
rbd-mirror-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
rbd-nbdRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
rbd-nbd-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el8cp | 2:18.2.1-194.el8cp |
cephRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-baseRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-base-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-commonRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-common-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-debugsourceRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-exporter-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-fuseRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-fuse-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-immutable-object-cacheRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-immutable-object-cache-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-mds-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-mgr-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-mibRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-mon-client-nvmeof-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-mon-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-osd-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-radosgw-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-resource-agentsRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-selinuxRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
ceph-test-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
cephadmRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
cephfs-mirror-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
cephfs-topRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
libcephfs-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
libcephfs2Red Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
libcephfs2-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
libcephsqlite-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librados-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librados-devel-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librados2Red Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librados2-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
libradospp-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
libradosstriper1Red Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
libradosstriper1-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librbd-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librbd1Red Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librbd1-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librgw-develRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librgw2Red Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
librgw2-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-ceph-argparseRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-ceph-commonRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-cephfsRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-cephfs-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-radosRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-rados-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-rbdRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-rbd-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-rgwRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
python3-rgw-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
rbd-fuse-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
rbd-mirror-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
rbd-nbdRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
rbd-nbd-debuginfoRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 2:18.2.1-194.el9cp | 2:18.2.1-194.el9cp |
gperftoolsRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 1:2.7-9.el8cp | 1:2.7-9.el8cp |
gperftools-debugsourceRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 1:2.7-9.el8cp | 1:2.7-9.el8cp |
gperftools-libsRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 1:2.7-9.el8cp | 1:2.7-9.el8cp |
gperftools-libs-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 1:2.7-9.el8cp | 1:2.7-9.el8cp |
liboathRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
liboath-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
libpskc-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
libunwindRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:1.3.1-3.el8cp | 0:1.3.1-3.el8cp |
libunwind-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:1.3.1-3.el8cp | 0:1.3.1-3.el8cp |
libunwind-debugsourceRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:1.3.1-3.el8cp | 0:1.3.1-3.el8cp |
oath-toolkitRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
oath-toolkit-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
oath-toolkit-debugsourceRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
oathtool-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
pam_oath-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
pskctool-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:2.6.2-3.el8cp | 0:2.6.2-3.el8cp |
python3-thrift-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:0.13.0-2.el8cp | 0:0.13.0-2.el8cp |
thriftRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:0.13.0-2.el8cp | 0:0.13.0-2.el8cp |
thrift-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:0.13.0-2.el8cp | 0:0.13.0-2.el8cp |
thrift-debugsourceRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:0.13.0-2.el8cp | 0:0.13.0-2.el8cp |
thrift-devel-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:0.13.0-2.el8cp | 0:0.13.0-2.el8cp |
thrift-glib-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:0.13.0-2.el8cp | 0:0.13.0-2.el8cp |
thrift-qt-debuginfoRed Hat:ceph_storage:7.1::el8 From an advisory covering 4 CVEs |
before 0:0.13.0-2.el8cp | 0:0.13.0-2.el8cp |
cephadm-ansibleRed Hat:ceph_storage:7.1::el9 From an advisory covering 4 CVEs |
before 1:3.2.0-1.el9cp | 1:3.2.0-1.el9cp |
grafanaUbuntu:16.04:LTS |
All versions, plus listed versions 2.6.0+dfsg-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-4822 is a medium vulnerability (CVSS 6.7) in Grafana, published October 16, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. Fixed in grafana 9.4.16.
References
grafana.com/security/security-advisories/cve-2023-4822
security.netapp.com/advisory/ntap-20231103-0008
nvd.nist.gov/vuln/detail/CVE-2023-4822
github.com/advisories/GHSA-fw9c-75hh-89p6
Show 194 moreShow less
access.redhat.com/errata/RHSA-2024:3925
bugzilla.redhat.com/show_bug.cgi?id=1871333
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3925.json
cve.org/CVERecord?id=CVE-2023-3128
ubuntu.com/security/CVE-2023-4822
Left out here: 69 references. The JSON record has them.