grafana vulnerabilities (openSUSE)
151 vulnerabilities.
grafanaopenSUSEgRPC-Go has an authorization bypass via missing leading slash in :path9.1 CriticalgrafanaopenSUSEAuthorization Bypass via TOCTOU in Grafana Datasource Deletion by Name2.6 LowgrafanaopenSUSEIncorrect calculation in CIRCL secp384r1 CombinedMult2.9 LowgrafanaopenSUSEfilippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity1.7 LowgrafanaopenSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 MediumgrafanaopenSUSEHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak6.9 MediumgrafanaopenSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 HighgrafanaopenSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 HighgrafanaopenSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 HighgrafanaopenSUSEOpenFGA Improper Policy Enforcement5.8 MediumgrafanaopenSUSEInfinite parsing loop in golang.org/x/net5.3 MediumgrafanaopenSUSEQuadratic parsing complexity in golang.org/x/net/html5.3 MediumgrafanaopenSUSEGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 MediumgrafanaopenSUSEAn open redirect vulnerability has been identified in Grafana OSS organization switching...4.2 MediumgrafanaopenSUSEGrafana is vulnerable to XSS attacks through open redirects and path traversal7.6 HighgrafanaopenSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 MediumgrafanaopenSUSEVery long unicode dashboard title or panel name can hang the frontend2.7 LowgrafanaopenSUSEAn access control vulnerability was discovered in Grafana OSS where an Organization administrator...5.5 MediumgrafanaopenSUSEGrafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin7.6 HighgrafanaopenSUSEGrafana's datasource proxy API allows authorization checks to be bypassed5.0 MediumgrafanaopenSUSEThe built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor...6.8 MediumgrafanaopenSUSEIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 MediumgrafanaopenSUSEjwt-go allows excessive memory allocation during header parsing7.5 HighgrafanaopenSUSEgo-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment3.7 LowgrafanaopenSUSEImproper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter7.5 HighgrafanaopenSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 MediumgrafanaopenSUSEGo JOSE's Parsing Vulnerable to Denial of Service6.6 MediumgrafanaopenSUSESecurity update for SUSE Manager Client ToolsNo scoregrafanaopenSUSEGrafana Alerting VictorOps integration could be exposed to users with Viewer permission4.3 MediumgrafanaopenSUSEVulnerability when creating log files in github.com/golang/glog7.1 HighgrafanaopenSUSEgo-git has an Argument Injection via the URL field9.2 CriticalgrafanaopenSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticalgrafanaopenSUSEPrivilege escalation vulnerability for Organizations in Grafana5.1 MediumgrafanaopenSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowgrafanaopenSUSEGrafana SQL Expressions allow for remote code execution9.4 CriticalgrafanaopenSUSEGrafana alerting wrong permission on datasource rule write endpoint5.1 MediumgrafanaopenSUSEgo-retryablehttp can leak basic auth credentials to log files6.0 MediumgrafanaopenSUSEHTTP/2 CONTINUATION flood in net/http7.5 HighgrafanaopenSUSEUsers outside an organization can delete a snapshot with its key6.5 MediumgrafanaopenSUSEGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumgrafanaopenSUSEEmail Validation Bypass And Preventing Sign Up From Email's Owner5.4 MediumgrafanaopenSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumgrafanaopenSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 CriticalgrafanaopenSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 MediumgrafanaopenSUSEGrafana Missing Synchronization vulnerability7.5 HighgrafanaopenSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 MediumgrafanaopenSUSEStored XSS in Graphite FunctionDescription tooltip6.2 MediumgrafanaopenSUSEGrafana vulnerable to Cross-site Scripting7.3 HighgrafanaopenSUSEGrafana vulnerable to Cross-site Scripting7.3 HighgrafanaopenSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 High- Show moreLoading…