grafana-debuginfo vulnerabilities (Red Hat)
96 vulnerabilities.
grafana-debuginfoRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highgrafana-debuginfoRed HatGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalgrafana-debuginfoRed HatExcessive memory allocation in net/http and net/textproto7.5 Highgrafana-debuginfoRed HatGrafana stored XSS in FileUploader component7.3 Highgrafana-debuginfoRed HatGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumgrafana-debuginfoRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumgrafana-debuginfoRed HatGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumgrafana-debuginfoRed HatGrafana contains Improper Input Validation6.4 Mediumgrafana-debuginfoRed HatGrafana users with email as a username can block other users from signing in4.3 Mediumgrafana-debuginfoRed HatData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumgrafana-debuginfoRed HatGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumgrafana-debuginfoRed HatGrafana plugin signature bypass vulnerability6.1 Mediumgrafana-debuginfoRed HatPrototype pollution in webpack loader-utils9.8 Criticalgrafana-debuginfoRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highgrafana-debuginfoRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgrafana-debuginfoRed HatAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumgrafana-debuginfoRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highgrafana-debuginfoRed HatExposure of client IP addresses in net/http6.5 Mediumgrafana-debuginfoRed HatStack exhaustion when decoding certain messages in encoding/gob7.5 Highgrafana-debuginfoRed HatStack exhaustion when unmarshaling certain documents in encoding/xml7.5 Highgrafana-debuginfoRed HatStack exhaustion on crafted paths in path/filepath7.5 Highgrafana-debuginfoRed HatStack exhaustion when reading certain archives in compress/gzip7.5 Highgrafana-debuginfoRed HatStack exhaustion in Glob on certain paths in io/fs7.5 Highgrafana-debuginfoRed HatStack exhaustion from deeply nested XML documents in encoding/xml7.5 Highgrafana-debuginfoRed HatStack exhaustion due to deeply nested types in go/parser5.5 Mediumgrafana-debuginfoRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumgrafana-debuginfoRed HatGrafana account takeover via OAuth vulnerability7.1 Highgrafana-debuginfoRed HatCross-site Scripting (XSS)5.4 Mediumgrafana-debuginfoRed HatUncontrolled Resource Consumption in promhttp7.5 Highgrafana-debuginfoRed HatExposure of Sensitive Information in Grafana4.3 Mediumgrafana-debuginfoRed HatCross Site Request Forgery in Grafana6.3 Mediumgrafana-debuginfoRed HatCross site scripting in Grafana proxy6.5 Mediumgrafana-debuginfoRed HatOAuth Identity Token exposure in Grafana4.3 Mediumgrafana-debuginfoRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highgrafana-debuginfoRed HatDirectory Traversal in Grafana4.3 Mediumgrafana-debuginfoRed HatSnapshot authentication bypass in grafana9.8 Criticalgrafana-debuginfoRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 Mediumgrafana-debuginfoRed HatGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 Mediumgrafana-debuginfoRed HatGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 Highgrafana-debuginfoRed HatDenial of service in Grafana7.5 Highgrafana-debuginfoRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Mediumgrafana-debuginfoRed HatXML Processing error in github.com/crewjam/saml9.8 Criticalgrafana-debuginfoRed HatGrafana XSS via a query alias for the ElasticSearch datasource6.1 Mediumgrafana-debuginfoRed HatGrafana Arbitrary File Read6.5 Mediumgrafana-debuginfoRed HatGrafana stored XSS5.4 Mediumgrafana-debuginfoRed HatServer Side Request Forgery in Grafana8.2 Highgrafana-debuginfoRed HatGrafana XSS via a column style6.1 Mediumgrafana-debuginfoRed HatGrafana XSS via the OpenTSDB datasource6.1 Mediumgrafana-debuginfoRed HatGrafana information disclosure5.5 Mediumgrafana-debuginfoRed HatGrafana world readable configuration files5.5 Medium- Show moreLoading…