grafana vulnerabilities (Ubuntu)
98 vulnerabilities.
grafanaUbuntuGrafana vulnerable to Authentication Bypass by Spoofing9.4 CriticalgrafanaUbuntuGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 MediumgrafanaUbuntuGrafana Missing Synchronization vulnerability7.5 HighgrafanaUbuntuGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 MediumgrafanaUbuntuStored XSS in Graphite FunctionDescription tooltip6.2 MediumgrafanaUbuntuStored XSS in Grafana Text plugin6.4 MediumgrafanaUbuntuGrafana vulnerable to Cross-site Scripting7.3 HighgrafanaUbuntuGrafana vulnerable to Cross-site Scripting7.3 HighgrafanaUbuntuWhen query caching is enabled in Grafana users can query another users session7.1 HighgrafanaUbuntuGrafana vulnerable to spoofing originalUrl of snapshots6.7 MediumgrafanaUbuntuGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 MediumgrafanaUbuntuGrafana contains Improper Input Validation6.4 MediumgrafanaUbuntuGrafana vulnerable to race condition allowing privilege escalation9.8 CriticalgrafanaUbuntuGrafana users with email as a username can block other users from signing in4.3 MediumgrafanaUbuntuData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 MediumgrafanaUbuntuGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 MediumgrafanaUbuntuGrafana plugin signature bypass vulnerability6.1 MediumgrafanaUbuntuGrafana folders admin only permission privilege escalation7.6 HighgrafanaUbuntuAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 MediumgrafanaUbuntuGrafana account takeover via OAuth vulnerability7.1 HighgrafanaUbuntuStored XSS in Grafana's Unified Alerting7.3 HighgrafanaUbuntuAn issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix...9.8 CriticalgrafanaUbuntuExposure of Sensitive Information in Grafana4.3 MediumgrafanaUbuntuCross Site Request Forgery in Grafana6.3 MediumgrafanaUbuntuCross site scripting in Grafana proxy6.5 MediumgrafanaUbuntuOAuth Identity Token exposure in Grafana4.3 MediumgrafanaUbuntuGrafana directory traversal for `.cvs` files4.3 MediumgrafanaUbuntuDirectory Traversal in Grafana4.3 MediumgrafanaUbuntuCross organization admin control in Grafana9.1 CriticalgrafanaUbuntuXSS vulnerability allowing arbitrary JavaScript execution6.9 MediumgrafanaUbuntuSnapshot authentication bypass in grafana9.8 CriticalgrafanaUbuntuDenial of service in Grafana7.5 HighgrafanaUbuntuGrafana XSS via a query alias for the ElasticSearch datasource6.1 MediumgrafanaUbuntuGrafana Arbitrary File Read6.5 MediumgrafanaUbuntuGrafana stored XSS5.4 MediumgrafanaUbuntuGrafana XSS via adding a link in General feature6.1 MediumgrafanaUbuntuGrafana XSS via a column style6.1 MediumgrafanaUbuntuGrafana XSS in Dashboard Text Panel6.1 MediumgrafanaUbuntuGrafana XSS via the OpenTSDB datasource6.1 MediumgrafanaUbuntuGrafana information disclosure5.5 MediumgrafanaUbuntuGrafana version < 6.7.3 is vulnerable for annotation popup XSS.6.1 MediumgrafanaUbuntuGrafana XSS in header column rename6.1 MediumgrafanaUbuntuAn issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana (e.g., MySQL...4.9 MediumgrafanaUbuntuIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 HighgrafanaUbuntuGrafana XSS Vulnerability5.4 MediumgrafanaUbuntuGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 MediumgrafanaUbuntuGrafana Authentication Bypass9.8 CriticalgrafanaUbuntuGrafana Cross-site Scripting (XSS)6.1 Medium