grafana vulnerabilities (Ubuntu)
98 vulnerabilities.
-
grafanaUbuntu SSO settings authorization bypass 8.9 High -
grafanaUbuntu Server-side expression parser denial of service 6.5 Medium -
grafanaUbuntu Azure Monitor access token disclosure via SSRF 7.7 High -
grafanaUbuntu Unbounded memory allocation in the Prometheus rule conversion API 6.5 Medium -
grafanaUbuntu Broken access control in dashboard snapshots 6.3 Medium -
grafanaUbuntu CVE-2026-17183 CVE Record 7.1 High -
grafanaUbuntu CVE-2026-11817 CVE Record 5.3 Medium -
grafanaUbuntu Pre-authentication denial of service in the public dashboard query endpoint 7.5 High -
grafanaUbuntu Stored XSS in the Geomap panel tile-layer attribution 7.3 High -
grafanaUbuntu IDOR in Annotations API allows unprivileged users to DELETE annotation 4.3 Medium -
grafanaUbuntu Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro 6.5 Medium -
grafanaUbuntu Grafana plugin resources can lead to unbounded memory allocation 6.5 Medium -
grafanaUbuntu Auth Proxy IPv6 whitelist bypass 7.4 High -
grafanaUbuntu SQL Expressions Read File From Disk 6.3 Medium -
grafanaUbuntu BAC in Snapshot API allows deletion of unauthorized dashboard snapshots 6.5 Medium -
grafanaUbuntu Users can generate Service Account tokens after permissions removal 5.9 Medium -
grafanaUbuntu Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin 7.1 High -
grafanaUbuntu Grafana Live push endpoint allows unbounded memory allocation leading to OOM 6.5 Medium -
grafanaUbuntu Viewer-triggered race condition in Grafana Live leads to complete server crash 6.5 Medium -
grafanaUbuntu Grafana Correlations: Cross-Tenant Data Disclosure and Permanent Deletion via Legacy org_id=0 Record 3.3 Low -
grafanaUbuntu Grafana Alerting Editors can edit destination of webhooks they did not create 1.3 Low -
grafanaUbuntu Query resampling can cause unbounded memory allocations 6.5 Medium -
grafanaUbuntu Grafana Testdata datasource can issue unbounded memory allocations 6.5 Medium -
grafanaUbuntu RCE on Grafana via sqlExpressions 9.1 Critical -
grafanaUbuntu OpenFeature evaluation API reads input data with no bounds 7.5 High -
grafanaUbuntu Public dashboards discloses all direct mode datasources 6.5 Medium -
grafanaUbuntu Missing Protected-field Authorization in Provisioning Contact Points API 5.4 Medium -
grafanaUbuntu Authorization Bypass via TOCTOU in Grafana Datasource Deletion by Name 2.6 Low -
grafanaUbuntu XSS in Grafana Explore stack trace 6.8 Medium -
grafanaUbuntu Public Dashboards time range restriction on annotations can be bypassed 5.3 Medium -
grafanaUbuntu Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation 8.1 High -
grafanaUbuntu Unauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out 7.5 High -
grafanaUbuntu An open redirect vulnerability has been identified in Grafana OSS organization switching... 4.2 Medium -
grafanaUbuntu Grafana is vulnerable to XSS attacks through open redirects and path traversal 7.6 High -
grafanaUbuntu Grafana's insecure DingDing Alert integration exposes sensitive information 4.3 Medium -
grafanaUbuntu Very long unicode dashboard title or panel name can hang the frontend 2.7 Low -
grafanaUbuntu Grafana vulnerable to authenticated users bypassing dashboard, folder permissions 8.3 High -
grafanaUbuntu An access control vulnerability was discovered in Grafana OSS where an Organization administrator... 5.5 Medium -
grafanaUbuntu Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin 7.6 High -
grafanaUbuntu Grafana's datasource proxy API allows authorization checks to be bypassed 5.0 Medium -
grafanaUbuntu Grafana Alerting VictorOps integration could be exposed to users with Viewer permission 4.3 Medium -
grafanaUbuntu Privilege escalation vulnerability for Organizations in Grafana 5.1 Medium -
grafanaUbuntu Grafana org admin can delete pending invites in different org 2.2 Low -
grafanaUbuntu Grafana SQL Expressions allow for remote code execution 9.4 Critical -
grafanaUbuntu Grafana alerting wrong permission on datasource rule write endpoint 5.1 Medium -
grafanaUbuntu Grafana plugin data sources vulnerable to access control bypass 4.4 Medium -
grafanaUbuntu Users outside an organization can delete a snapshot with its key 6.5 Medium -
grafanaUbuntu User with permissions to create a data source can CRUD all data sources 6.0 Medium -
grafanaUbuntu Email Validation Bypass And Preventing Sign Up From Email's Owner 5.4 Medium -
grafanaUbuntu Grafana privilege escalation vulnerability 6.7 Medium - Show olderLoading…