grafana vulnerabilities (Red Hat)
108 vulnerabilities.
grafanaRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighgrafanaRed HatGrafana vulnerable to Authentication Bypass by Spoofing9.4 CriticalgrafanaRed HatExcessive memory allocation in net/http and net/textproto7.5 HighgrafanaRed HatGrafana stored XSS in FileUploader component7.3 HighgrafanaRed HatGrafana vulnerable to spoofing originalUrl of snapshots6.7 MediumgrafanaRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumgrafanaRed HatGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 MediumgrafanaRed HatGrafana contains Improper Input Validation6.4 MediumgrafanaRed HatGrafana users with email as a username can block other users from signing in4.3 MediumgrafanaRed HatData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 MediumgrafanaRed HatGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 MediumgrafanaRed HatGrafana plugin signature bypass vulnerability6.1 MediumgrafanaRed HatPrototype pollution in webpack loader-utils9.8 CriticalgrafanaRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighgrafanaRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighgrafanaRed HatAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 MediumgrafanaRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighgrafanaRed HatTZInfo relative path traversal vulnerability allows loading of arbitrary files7.5 HighgrafanaRed HatExposure of client IP addresses in net/http6.5 MediumgrafanaRed HatStack exhaustion when decoding certain messages in encoding/gob7.5 HighgrafanaRed HatStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighgrafanaRed HatStack exhaustion on crafted paths in path/filepath7.5 HighgrafanaRed HatStack exhaustion when reading certain archives in compress/gzip7.5 HighgrafanaRed HatStack exhaustion in Glob on certain paths in io/fs7.5 HighgrafanaRed HatStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighgrafanaRed HatStack exhaustion due to deeply nested types in go/parser5.5 MediumgrafanaRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumgrafanaRed HatGrafana account takeover via OAuth vulnerability7.1 HighgrafanaRed HatInefficient Regular Expression Complexity in moment7.5 HighgrafanaRed HatDenial of Service Vulnerability in Rack Multipart Parsing7.5 HighgrafanaRed HatPossible shell escape sequence injection vulnerability in Rack10.0 CriticalgrafanaRed HatHTTP Request Smuggling in puma9.1 CriticalgrafanaRed HatCross-site Scripting (XSS)5.4 MediumgrafanaRed HatUncontrolled Resource Consumption in promhttp7.5 HighgrafanaRed HatExposure of Sensitive Information in Grafana4.3 MediumgrafanaRed HatCross Site Request Forgery in Grafana6.3 MediumgrafanaRed HatCross site scripting in Grafana proxy6.5 MediumgrafanaRed HatOAuth Identity Token exposure in Grafana4.3 MediumgrafanaRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighgrafanaRed HatDirectory Traversal in Grafana4.3 MediumgrafanaRed HatSnapshot authentication bypass in grafana9.8 CriticalgrafanaRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumgrafanaRed HatGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumgrafanaRed HatGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighgrafanaRed HatDenial of service in Grafana7.5 HighgrafanaRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumgrafanaRed HatIn Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in...8.1 HighgrafanaRed HatXML Processing error in github.com/crewjam/saml9.8 CriticalgrafanaRed HatUser credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,...7.1 HighgrafanaRed HatGrafana XSS via a query alias for the ElasticSearch datasource6.1 Medium- Show moreLoading…