Security

Security Advisories

Showing 24 results, page 5 of 6

Published CVE records
CVESeverity (CVSS)Advisory Title
CVE-2023-1410Medium (6.2)XSS in Graphite Functions in Grafana
CVE-2023-0507High (7.3)XSS in Geomap in Grafana
CVE-2023-22462Medium (6.4)XSS in Text Panel in Grafana
CVE-2023-0594High (7.3)XSS in TraceView in Grafana
CVE-2022-23498High (7.1)Information Disclosure in Query Cache in Grafana
CVE-2022-39324Medium (6.7)URL Spoofing in Snapshots in Grafana
CVE-2022-23552High (7.3)XSS in ResourcePicker in Grafana
CVE-2022-39307Medium (6.7)Information Disclosure in Password Reset in Grafana
CVE-2022-39306Medium (6.4)Input Validation Bypass in User Registration in Grafana
CVE-2022-39328Critical (9.8)Race Condition in Authentication in Grafana
CVE-2022-39201Medium (6.8)Cookie Leakage in Proxy in Grafana
CVE-2022-31123Medium (6.1)Signature Bypass in Plugin System in Grafana
CVE-2022-31130Medium (4.9)Token Leakage in Proxy in Grafana
CVE-2022-39229Medium (4.3)User Enumeration in Login in Grafana
CVE-2022-35957Medium (6.6)Privilege Escalation in Auth Proxy in Grafana
CVE-2022-36062High (7.1)Privilege Escalation in Folder Permissions in Grafana
CVE-2022-31176High (7.6)File Disclosure in Image Renderer in Grafana
CVE-2022-31107High (7.1)Account Takeover in OAuth in Grafana
CVE-2022-31097High (7.3)XSS in Unified Alerting in Grafana
CVE-2022-29170Medium (6.6)Network Restriction Bypass in Data Sources in Grafana
CVE-2022-24812High (8.0)Privilege Escalation in API Keys in Grafana
CVE-2022-21703Medium (6.3)CSRF in Web Interface in Grafana
CVE-2022-21713Medium (4.3)IDOR in Teams API in Grafana
CVE-2022-21702Medium (6.5)XSS in Proxy in Grafana

Security Advisories | Grafana Labs