supportutils-plugin-salt vulnerabilities (SUSE)
95 vulnerabilities.
supportutils-plugin-saltSUSEGrafana contains Improper Input Validation6.4 Mediumsupportutils-plugin-saltSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumsupportutils-plugin-saltSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumsupportutils-plugin-saltSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumsupportutils-plugin-saltSUSEGrafana plugin signature bypass vulnerability6.1 Mediumsupportutils-plugin-saltSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highsupportutils-plugin-saltSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highsupportutils-plugin-saltSUSEGrafana folders admin only permission privilege escalation7.6 Highsupportutils-plugin-saltSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumsupportutils-plugin-saltSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highsupportutils-plugin-saltSUSEGrafana account takeover via OAuth vulnerability7.1 Highsupportutils-plugin-saltSUSEStored XSS in Grafana's Unified Alerting7.3 Highsupportutils-plugin-saltSUSESUMA user enumeration via weak error message5.3 Mediumsupportutils-plugin-saltSUSESUMA unauthenticated remote DoS via resource exhaustion7.5 Highsupportutils-plugin-saltSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumsupportutils-plugin-saltSUSEPrototype Pollution in async7.8 Highsupportutils-plugin-saltSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highsupportutils-plugin-saltSUSEPrototype Pollution in minimist9.8 Criticalsupportutils-plugin-saltSUSEUncontrolled Resource Consumption in promhttp7.5 Highsupportutils-plugin-saltSUSEExposure of Sensitive Information in Grafana4.3 Mediumsupportutils-plugin-saltSUSECross Site Request Forgery in Grafana6.3 Mediumsupportutils-plugin-saltSUSECross site scripting in Grafana proxy6.5 Mediumsupportutils-plugin-saltSUSEOAuth Identity Token exposure in Grafana4.3 Mediumsupportutils-plugin-saltSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highsupportutils-plugin-saltSUSEGrafana directory traversal for `.cvs` files4.3 Mediumsupportutils-plugin-saltSUSEDirectory Traversal in Grafana4.3 Mediumsupportutils-plugin-saltSUSEGrafana path traversal7.5 Highsupportutils-plugin-saltSUSECross organization admin control in Grafana9.1 Criticalsupportutils-plugin-saltSUSEPrototype Pollution in kriszyp/json-schema9.8 Criticalsupportutils-plugin-saltSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumsupportutils-plugin-saltSUSEAnsible discloses sensitive information in traceback error message5.5 Mediumsupportutils-plugin-saltSUSESnapshot authentication bypass in grafana9.8 Criticalsupportutils-plugin-saltSUSEImproper Input Validation and Command Injection in Ansible7.1 Highsupportutils-plugin-saltSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highsupportutils-plugin-saltSUSESM2 Decryption Buffer Overflow9.8 Criticalsupportutils-plugin-saltSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 Highsupportutils-plugin-saltSUSEA flaw was found in several ansible modules, where parameters containing credentials, such as...5.5 Mediumsupportutils-plugin-saltSUSEAnsible Exposes Sensitive Information7.5 Highsupportutils-plugin-saltSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumsupportutils-plugin-saltSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumsupportutils-plugin-saltSUSEInsertion of Sensitive Information into Log File in ansible5.5 Mediumsupportutils-plugin-saltSUSERegular Expression Denial of Service (ReDoS)7.5 Highsupportutils-plugin-saltSUSESaltStack Salt Denial of Service via a crafted authentication request7.5 Highsupportutils-plugin-saltSUSESaltStack Salt Directory traversal vulnerability in minion id validation9.8 Criticalsupportutils-plugin-saltSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical