grafana vulnerabilities (Bitnami)
123 vulnerabilities.
grafanaBitnamiIncorrect privilege assignment10.0 CriticalgrafanaBitnamiAn open redirect vulnerability has been identified in Grafana OSS organization switching...4.2 MediumgrafanaBitnamiGrafana is vulnerable to XSS attacks through open redirects and path traversal7.6 HighgrafanaBitnamiGrafana's insecure DingDing Alert integration exposes sensitive information4.3 MediumgrafanaBitnamiVery long unicode dashboard title or panel name can hang the frontend2.7 LowgrafanaBitnamiGrafana vulnerable to authenticated users bypassing dashboard, folder permissions8.3 HighgrafanaBitnamiAn access control vulnerability was discovered in Grafana OSS where an Organization administrator...5.5 MediumgrafanaBitnamiGrafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin7.6 HighgrafanaBitnamiGrafana's datasource proxy API allows authorization checks to be bypassed5.0 MediumgrafanaBitnamiThe built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor...6.8 MediumgrafanaBitnamiGrafana Alerting VictorOps integration could be exposed to users with Viewer permission4.3 MediumgrafanaBitnamiGrafana org admin can delete pending invites in different org2.2 LowgrafanaBitnamiGrafana SQL Expressions allow for remote code execution9.4 CriticalgrafanaBitnamiGrafana alerting wrong permission on datasource rule write endpoint5.1 MediumgrafanaBitnamiGrafana plugin data sources vulnerable to access control bypass4.4 MediumgrafanaBitnamiUsers outside an organization can delete a snapshot with its key6.5 MediumgrafanaBitnamiUser with permissions to create a data source can CRUD all data sources6.0 MediumgrafanaBitnamiSSRF in CSV Datasource Plugin5.0 MediumgrafanaBitnamiEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 MediumgrafanaBitnamiGrafana is an open-source platform for monitoring and observability. In Grafana Enterprise,...6.6 MediumgrafanaBitnamiGrafana privilege escalation vulnerability6.7 MediumgrafanaBitnamiGrafana vulnerable to Authentication Bypass by Spoofing9.4 CriticalgrafanaBitnamiGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 MediumgrafanaBitnamiGrafana Missing Synchronization vulnerability7.5 HighgrafanaBitnamiGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 MediumgrafanaBitnamiStored XSS in Graphite FunctionDescription tooltip6.2 MediumgrafanaBitnamiStored XSS in Grafana Text plugin6.4 MediumgrafanaBitnamiGrafana vulnerable to Cross-site Scripting7.3 HighgrafanaBitnamiGrafana vulnerable to Cross-site Scripting7.3 HighgrafanaBitnamiWhen query caching is enabled in Grafana users can query another users session7.1 HighgrafanaBitnamiGrafana stored XSS in FileUploader component7.3 HighgrafanaBitnamiGrafana vulnerable to spoofing originalUrl of snapshots6.7 MediumgrafanaBitnamiGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 MediumgrafanaBitnamiGrafana contains Improper Input Validation6.4 MediumgrafanaBitnamiGrafana vulnerable to race condition allowing privilege escalation9.8 CriticalgrafanaBitnamiGrafana users with email as a username can block other users from signing in4.3 MediumgrafanaBitnamiData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 MediumgrafanaBitnamiGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 MediumgrafanaBitnamiGrafana plugin signature bypass vulnerability6.1 MediumgrafanaBitnamiGrafana folders admin only permission privilege escalation7.6 HighgrafanaBitnamiAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 MediumgrafanaBitnamiGrafana account takeover via OAuth vulnerability7.1 HighgrafanaBitnamiStored XSS in Grafana's Unified Alerting7.3 HighgrafanaBitnami** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard...7.5 HighgrafanaBitnamiGrafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor...7.5 HighgrafanaBitnamiGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 MediumgrafanaBitnamiThe querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not...9.8 CriticalgrafanaBitnamiFGAC API Key privilege escalation in Grafana8.0 HighgrafanaBitnamiAn issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix...9.8 CriticalgrafanaBitnamiExposure of Sensitive Information in Grafana4.3 Medium- Show moreLoading…