grafana vulnerabilities (AlmaLinux)
99 vulnerabilities.
grafanaAlmaLinuxGrafana vulnerable to Authentication Bypass by Spoofing9.4 CriticalgrafanaAlmaLinuxExcessive memory allocation in net/http and net/textproto7.5 HighgrafanaAlmaLinuxGrafana stored XSS in FileUploader component7.3 HighgrafanaAlmaLinuxGrafana vulnerable to spoofing originalUrl of snapshots6.7 MediumgrafanaAlmaLinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumgrafanaAlmaLinuxGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 MediumgrafanaAlmaLinuxGrafana contains Improper Input Validation6.4 MediumgrafanaAlmaLinuxGrafana users with email as a username can block other users from signing in4.3 MediumgrafanaAlmaLinuxData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 MediumgrafanaAlmaLinuxGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 MediumgrafanaAlmaLinuxGrafana plugin signature bypass vulnerability6.1 MediumgrafanaAlmaLinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighgrafanaAlmaLinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighgrafanaAlmaLinuxAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 MediumgrafanaAlmaLinuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighgrafanaAlmaLinuxExposure of client IP addresses in net/http6.5 MediumgrafanaAlmaLinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighgrafanaAlmaLinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighgrafanaAlmaLinuxStack exhaustion on crafted paths in path/filepath7.5 HighgrafanaAlmaLinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighgrafanaAlmaLinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighgrafanaAlmaLinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgrafanaAlmaLinuxStack exhaustion due to deeply nested types in go/parser5.5 MediumgrafanaAlmaLinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgrafanaAlmaLinuxGrafana account takeover via OAuth vulnerability7.1 HighgrafanaAlmaLinuxCross-site Scripting (XSS)5.4 MediumgrafanaAlmaLinuxUncontrolled Resource Consumption in promhttp7.5 HighgrafanaAlmaLinuxExposure of Sensitive Information in Grafana4.3 MediumgrafanaAlmaLinuxCross Site Request Forgery in Grafana6.3 MediumgrafanaAlmaLinuxCross site scripting in Grafana proxy6.5 MediumgrafanaAlmaLinuxOAuth Identity Token exposure in Grafana4.3 MediumgrafanaAlmaLinuxgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgrafanaAlmaLinuxDirectory Traversal in Grafana4.3 MediumgrafanaAlmaLinuxThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgrafanaAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgrafanaAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgrafanaAlmaLinuxDenial of service in Grafana7.5 HighgrafanaAlmaLinuxIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumgrafanaAlmaLinuxGrafana Arbitrary File Read6.5 MediumgrafanaAlmaLinuxGrafana stored XSS5.4 MediumgrafanaAlmaLinuxGrafana XSS via a column style6.1 MediumgrafanaAlmaLinuxGrafana XSS via the OpenTSDB datasource6.1 MediumgrafanaAlmaLinuxGrafana information disclosure5.5 MediumgrafanaAlmaLinuxGrafana world readable configuration files5.5 MediumgrafanaAlmaLinuxGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 MediumgrafanaAlmaLinuxGrafana XSS in header column rename6.1 MediumgrafanaAlmaLinuxDOMPurify nesting-based mXSS10.0 CriticalgrafanaAlmaLinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical