config

Oct 6, 2022 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Jul 24, 2023 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Jul 21, 2023 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Jul 21, 2023 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Jul 20, 2023 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Jun 12, 2023 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Jun 12, 2023 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Jun 8, 2023 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

Mar 30, 2023 GO-2024-2629GO-2024-2661GO-2024-2697GO-2024-2843GO-2024-2844GO-2024-2847GO-2024-2848GO-2024-2851GO-2024-2852GO-2024-2854GO-2024-2855GO-2024-2856GO-2024-2857GO-2024-2867

  GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

  GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

  GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

  GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

  GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

  GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

  GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

  GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

  GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

  GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

  GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

  GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

  GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

  GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana