grafana vulnerabilities (openEuler)

26 vulnerabilities.

• grafana openEuler HTTP/2 rapid reset can cause excessive work in net/http CVE-2023-39325 Public exploitFix available 7.5 HighOctober 11, 2023
• grafana openEuler Grafana stored XSS in FileUploader component CVE-2022-23552 Fix available 7.3 HighJanuary 27, 2023
• grafana openEuler Grafana vulnerable to spoofing originalUrl of snapshots CVE-2022-39324 Fix available 6.7 MediumJanuary 27, 2023
• grafana openEuler Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password CVE-2022-39307 Fix available 6.7 MediumNovember 9, 2022
• grafana openEuler Grafana contains Improper Input Validation CVE-2022-39306 Fix available 6.4 MediumNovember 9, 2022
• grafana openEuler Grafana users with email as a username can block other users from signing in CVE-2022-39229 Fix available 4.3 MediumOctober 13, 2022
• grafana openEuler Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins CVE-2022-39201 Fix available 6.8 MediumOctober 13, 2022
• grafana openEuler Grafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins CVE-2022-31130 Fix available 4.9 MediumOctober 13, 2022
• grafana openEuler Grafana plugin signature bypass vulnerability CVE-2022-31123 Fix available 6.1 MediumOctober 13, 2022
• grafana openEuler Grafana folders admin only permission privilege escalation CVE-2022-36062 Fix available 7.6 HighSeptember 22, 2022
• grafana openEuler Authentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin CVE-2022-35957 Fix available 6.6 MediumSeptember 20, 2022
• grafana openEuler Exposure of client IP addresses in net/http CVE-2022-32148 Fix available 6.5 MediumJuly 16, 2022
• grafana openEuler Grafana account takeover via OAuth vulnerability CVE-2022-31107 Fix available 7.1 HighJuly 15, 2022
• grafana openEuler Stored XSS in Grafana's Unified Alerting CVE-2022-31097 Fix available EPSS 70.1% 7.3 HighJuly 15, 2022
• grafana openEuler Grafana Enterprise datasource network restrictions bypass via HTTP redirects CVE-2022-29170 Public exploitFix available 6.6 MediumMay 20, 2022
• grafana openEuler Exposure of Sensitive Information in Grafana CVE-2022-21713 Fix available 4.3 MediumFebruary 8, 2022
• grafana openEuler Cross Site Request Forgery in Grafana CVE-2022-21703 Fix available 6.3 MediumFebruary 8, 2022
• grafana openEuler Cross site scripting in Grafana proxy CVE-2022-21702 Fix available 6.5 MediumFebruary 8, 2022
• grafana openEuler OAuth Identity Token exposure in Grafana CVE-2022-21673 Fix available 4.3 MediumJanuary 18, 2022
• grafana openEuler Directory Traversal in Grafana CVE-2021-43813 Fix available EPSS 56.6% 4.3 MediumDecember 10, 2021
• grafana openEuler Snapshot authentication bypass in grafana CVE-2021-39226 In KEVFix available EPSS 99.9% 9.8 CriticalOctober 5, 2021
• grafana openEuler One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7... CVE-2021-28148 Fix available 7.5 HighMarch 22, 2021
• grafana openEuler The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x... CVE-2021-28147 Fix available 6.5 MediumMarch 22, 2021
• grafana openEuler Denial of service in Grafana CVE-2021-27358 Fix available EPSS 83.0% 7.5 HighMarch 18, 2021
• grafana openEuler XML Processing error in github.com/crewjam/saml CVE-2020-27846 Fix available 9.8 CriticalDecember 21, 2020
• grafana openEuler Grafana XSS via a query alias for the ElasticSearch datasource CVE-2020-24303 Fix available 6.1 MediumOctober 28, 2020