grafana vulnerabilities (openSUSE)
151 vulnerabilities.
grafanaopenSUSEGrafana stored XSS in FileUploader component7.3 HighgrafanaopenSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 MediumgrafanaopenSUSEDirectorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR6.5 MediumgrafanaopenSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 MediumgrafanaopenSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 MediumgrafanaopenSUSEGrafana contains Improper Input Validation6.4 MediumgrafanaopenSUSEGrafana users with email as a username can block other users from signing in4.3 MediumgrafanaopenSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 MediumgrafanaopenSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 MediumgrafanaopenSUSEGrafana plugin signature bypass vulnerability6.1 MediumgrafanaopenSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighgrafanaopenSUSEGrafana folders admin only permission privilege escalation7.6 HighgrafanaopenSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 MediumgrafanaopenSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighgrafanaopenSUSEGrafana account takeover via OAuth vulnerability7.1 HighgrafanaopenSUSEStored XSS in Grafana's Unified Alerting7.3 HighgrafanaopenSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 MediumgrafanaopenSUSEFGAC API Key privilege escalation in Grafana8.0 HighgrafanaopenSUSEPrototype Pollution in async7.8 HighgrafanaopenSUSEExposure of Sensitive Information in Grafana4.3 MediumgrafanaopenSUSECross Site Request Forgery in Grafana6.3 MediumgrafanaopenSUSECross site scripting in Grafana proxy6.5 MediumgrafanaopenSUSEOAuth Identity Token exposure in Grafana4.3 MediumgrafanaopenSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 HighgrafanaopenSUSEGrafana directory traversal for `.cvs` files4.3 MediumgrafanaopenSUSEDirectory Traversal in Grafana4.3 MediumgrafanaopenSUSEGrafana path traversal7.5 HighgrafanaopenSUSECross organization admin control in Grafana9.1 CriticalgrafanaopenSUSEPrototype Pollution in kriszyp/json-schema9.8 CriticalgrafanaopenSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 MediumgrafanaopenSUSESnapshot authentication bypass in grafana9.8 CriticalgrafanaopenSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 HighgrafanaopenSUSESM2 Decryption Buffer Overflow9.8 CriticalgrafanaopenSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 HighgrafanaopenSUSEOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7...7.5 HighgrafanaopenSUSEThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x...6.5 MediumgrafanaopenSUSEThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control...6.5 MediumgrafanaopenSUSEGrafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor...7.1 HighgrafanaopenSUSEDenial of service in Grafana7.5 HighgrafanaopenSUSERegular Expression Denial of Service (ReDoS)7.5 HighgrafanaopenSUSEServer Side Request Forgery in Grafana8.2 HighgrafanaopenSUSEGrafana XSS in header column rename6.1 MediumgrafanaopenSUSEIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...7.5 HighgrafanaopenSUSEGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 MediumgrafanaopenSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical